Repository navigation
Dell Purchase Phishing Campaign #2302
jasongodev
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
I recently received a phishing email with the following content.
The email was sent to a different email address but nevertheless directed to my inbox. Of course, it's always Microsoft's infrastructure that they use to send unsolicited emails like this. Classic phishing delivery techniques.
What is unusual are the following:
dell.comThis phishing campaign was described by BlueScreenComputer in their blog last September 2, 2026: https://bluescreencomputer.com/2026/09/02/dell-purchase-phishing/
To quote:
In this case, block lists like the Phishing Database can't help because there's nothing to block except possibly the multiple chains of malicious *.onmicrosoft.com senders. However, they might be legitimate Microsoft accounts and was just used because of Microsoft's own vulnerabilities. Consistent to this idea is that our block lists do not have any *.onmicrosoft.com.
Here's the full email headers and body for those who want to analyse the phishing campaign.
All reactions