---
title: Email scam brandjacks One Drive
description: Malicious email scam brandjacks One Drive, claiming you have a purchase order to review. Link directs the user to a fake Office 365 phishing website, then asks the user to enter your email address and password.
---

[MailGuard Blog — Breaking alerts, news and updates on cybersecurity topics ](https://www.mailguard.com.au/blog)

# [Email scam brandjacks One Drive](https://www.mailguard.com.au/blog/email-scam-brandjacks-one-drive)

 Written by [MailGuard](https://www.mailguard.com.au/blog/author/mailguard) | 15 June 2018 02:23:49 Z

> We've blocked a malicious email scam brandjacking One Drive.  
> 
> The email tells the recipient there's a purchase order to review, with a link to view the file. The link directs the user to a fake Office 365 phishing website, then asks the user to enter your email address and password. Once submitted, the page indicates the details entered are incorrect and requires input again.
> 
> The email is being sent from what appears to be a compromised mailbox.
> 
> If you see this message in your inbox delete it immediately. 
> 
> 
> 
> > [#ZERODAY](https://twitter.com/hashtag/ZERODAY?src=hash&ref_src=twsrc%5Etfw) [#FASTBREAK](https://twitter.com/hashtag/FASTBREAK?src=hash&ref_src=twsrc%5Etfw) Simple email [#brandjacking](https://twitter.com/hashtag/brandjacking?src=hash&ref_src=twsrc%5Etfw) OneDrive, claims you've been sent new documents and asks you to review a purchase order. Link leads to a [#phishing](https://twitter.com/hashtag/phishing?src=hash&ref_src=twsrc%5Etfw) site and requests sign in with an email address and password  
> > [#CyberSecurity](https://twitter.com/hashtag/CyberSecurity?src=hash&ref_src=twsrc%5Etfw) [#CyberCrime](https://twitter.com/hashtag/CyberCrime?src=hash&ref_src=twsrc%5Etfw) [#mailGuard](https://twitter.com/hashtag/mailGuard?src=hash&ref_src=twsrc%5Etfw) [@scamwatch_gov](https://twitter.com/Scamwatch_gov?ref_src=twsrc%5Etfw) [pic.twitter.com/smA9XQhJeH](https://t.co/smA9XQhJeH)
> > 
> >  — MailGuard (@MailGuard) [June 15, 2018](https://twitter.com/MailGuard/status/1007441697570263041?ref_src=twsrc%5Etfw)
> 
> 
> 
>  
> 
> ## What is brandjacking?
> 
> Brandjacking is basically a kind of forgery. Scammers use the trademarks of well-known companies in their emails to deceive their victims and gain their trust.
> 
> In a typical [brandjacking scam,](https://www.mailguard.com.au/blog/brandjacking-malware-hiding) criminals create email templates that look like messages from big companies and send them out wholesale to millions of recipients. When the scam message shows up in a victim’s inbox they feel safe opening it because it looks like a legitimate message from a familiar company.
> 
> Some commonly used brandjacking formats are fake invoice notifications or requests for account verification.
> 
>  
> 
> ## Don't get scammed
> 
> If your company’s email accounts aren’t protected, scam emails like the one above are almost certainly being received by your staff.  Cybercriminals know people can be tricked; that’s why they send out millions of scam messages and put so much effort into making them look convincing.
> 
> People are not machines; we're all capable of making bad judgement calls. Without email filtering protecting your business, it’s just a matter of time before someone in your organisation has a momentary lapse of judgement and clicks on the wrong thing.
> 
> For a few dollars per staff member per month, you can protect your business with MailGuard's [predictive email security.](https://www.mailguard.com.au/services/mailguard)
> 
> [Contact a cybersecurity expert](https://www.mailguard.com.au/contact) at MailGuard today about making your company's network secure. 
> 
> *Stay up-to-date with new posts on the MailGuard Blog by subscribing to free updates. Click on the button below:*
> 
> 
> 
>  
> 
>  
> 
>  

[View full post](https://www.mailguard.com.au/blog/email-scam-brandjacks-one-drive)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "MailGuard"
  },
  "dateModified" : "2018-06-15T03:31:44.986Z",
  "datePublished" : "2018-06-15T02:23:49Z",
  "headline" : "Email scam brandjacks One Drive",
  "image" : {
    "@type" : "ImageObject",
    "height" : 630,
    "url" : "https://cdn2.hubspot.net/hubfs/441818/ZeroDay_Social_Image_One_Drive_150618_1200x630_Twitter.png",
    "width" : 1200
  },
  "mainEntityOfPage" : "https://www.mailguard.com.au/blog/email-scam-brandjacks-one-drive",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/441818/images/MailGuard_AMP_60x60.png",
      "width" : 60.0
    },
    "name" : "MailGuard Blog"
  }
}
```