MailGuard Blog — Breaking alerts, news and updates on cybersecurity topics

Phishing scam brandjacks OneDrive

Written by Emmanuel Marshall | 28 May 2018 04:08:20 Z


A new phishing scam discovered by MailGuard is trying to mislead victims by impersonating a OneDrive notification.

The phishing email (shown below) claims to be from “ȪneḎrive” (sic) and is associated with several sender email accounts including:

  • alison_cody@mckinnonbasketball.org
  • craig@selectinsurance.com.au
  • pierre.mars@cap-xx.com



The email tells intended victims that there is a “document received via ȪneḎrive” and they should click on a link to “review document.”

The link takes the victim to a phishing page (shown in the screenshot at the top of the page) where they are asked to submit their Microsoft login credentials.

The objective of this kind of scam is to harvest login data that can then be used in identity theft and for hacking into user accounts.

Help us to warn people about this scam by sharing our Tweet, below: