Small businesses across New Jersey are seeing a rise in phishing emails impersonating Microsoft 365 and Outlook support. These emails are designed to steal login credentials and take over business email accounts.
Once an attacker gains access, they often:
- Read private emails
- Send phishing messages from the compromised account
- Attempt financial fraud or invoice scams
What These Emails Look Like
Common warning signs include:
- Subject lines such as:
- “Microsoft Account Verification Required”
- “Unusual Sign-In Detected”
- “Your Email Will Be Disabled”
- A sense of urgency or threat
- Links that lead to fake Microsoft login pages
- Requests to “verify” or “restore” your account
Even well-trained users can be fooled by these messages.
What Happens If You Click the Link
If credentials are entered into a fake login page, attackers may:
- Immediately log into the real account
- Change passwords and recovery options
- Disable security alerts
- Use the account to target coworkers or clients
In many cases, the compromise is not noticed until days later.
How to Protect Your Business Right Now
We strongly recommend the following steps:
1. Enable Multi-Factor Authentication (MFA)
MFA is the single most effective defense against email account takeovers.
2. Verify Emails Before Clicking
Microsoft will never ask you to confirm your password via email.
3. Train Employees Regularly
Employees should know how to recognize:
- Fake login pages
- Suspicious links
- Unexpected attachments
4. Report Suspicious Emails
If an email looks suspicious:
- Do not click links
- Do not open attachments
- Contact your IT or security provider immediately
What to Do If You’ve Already Clicked
If you believe an account may be compromised:
- Change the password immediately
- Enable MFA if not already enabled
- Check for:
- Forwarding rules
- Unauthorized sign-ins
- Sent emails you didn’t send
- Contact a cybersecurity professional for assistance
Fast response can prevent further damage.
Need Help Securing Your Email?
NJ Cyber Security Solutions helps small businesses:
- Secure Microsoft 365 and Google Workspace
- Investigate email compromises
- Implement phishing-resistant security controls
If you’re unsure whether your email environment is secure, we can help.
Contact NJ Cyber Security Solutions for assistance.
609-400-3002
