logo

“Sad announcement” email leads to tech support scam

ID: 63923df9-ab15-563a-ae95-9e461ec65c3c

STIX ID: report--63923df9-ab15-563a-ae95-9e461ec65c3c

Feed Name: Malwarebytes Blog

Threat Score
40/100

Date Published: 2024-11-20

Date Updated: 2026-04-28

...
...

Tech-support scammers are sending impersonation emails titled "Sad announcement: <First Last>" containing short-lived NameCheap domains that redirect to Azure Blob Storage-hosted pages that display fake Windows Defender scan results to frighten victims into calling or paying for fraudulent support; the report documents subject and link patterns, sample domains, geographic targeting, and recommended avoidance and remediation steps.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.