There's a rash of scam spam coming from a real Microsoft address
SMRTR summary
Scammers are exploiting a legitimate Microsoft email address—[email protected]—to send fraudulent emails claiming fake $399 charges and requesting victims call a phone number to dispute the transaction. The criminals abuse Power BI's function that allows external email addresses to be added as subscribers, burying subscription mentions at the bottom of deceptive messages. Microsoft actually recommends users add this address to their allow lists to prevent spam filtering, making the scam particularly effective at bypassing security measures.
SMRTR provides this summary for quick context. The original article belongs to Ars Technica.
Read the original article