"Service Desk" Email Scam Tricks Users into Handing Over Login Credentials

A deceptive spam campaign using the subject “Service Desk” has been identified as a phishing attack aimed at stealing users’ email credentials. Disguised as a technical alert, the email claims that messages failed to deliver due to a resolved server issue and urges recipients to review their undelivered emails. However, the link provided leads to a phishing website designed to harvest login information.

What Is the “Service Desk” Email?

The “Service Desk” email is not from any legitimate organization or IT support service. It is a phishing message that falsely informs recipients about undelivered emails caused by a temporary server issue. The message claims that the problem has been resolved and that the pending messages can now be reviewed—provided the user follows a link before the emails are deleted.

This is a classic phishing tactic. The entire message is fabricated, and its purpose is to trick users into entering their email login credentials on a fake website.

The scam email reads like the following:

Subject: FWD: New Messages, not delivered to ********, Correct the Error now!

******** Service Desk

Hello ********,

Our Server has prevented the delivery of some new emails to your inbox due to server error which have now been corrected.
kindly review these messages here and choose what happens to them.

View Emails

Emails will be deleted automatically after some days. You can change the frequency of these notifications within your email quarantine portal.

Alternatively you can visit the Service Desk Portal to update your email quarantine settings.

******** Support
This message is generated automatically by the server. Please follow the instructions in the email to resolve this issue or contact your network administrator

How the Scam Works

When users click the link in the email, they are redirected to a phishing site that does not resemble an email interface. In this campaign, the fake page appeared to show a blurred Microsoft Excel document titled “RETAIL PRODUCTS (CONSUMER PACKING).” Overlaid on this was a pop-up requesting the user to “Sign in with email password to download document.”

This false sign-in prompt is the real trap. Any information entered is sent directly to scammers, who can then use it to hijack the victim’s email account.

Email accounts are valuable targets for cybercriminals, as they often contain sensitive personal data and serve as gateways to other services. Once compromised, these accounts can be exploited to impersonate the user, request money from contacts, spread malware, or access financial platforms like online banking, e-commerce accounts, and digital wallets.

Consequences of Falling for This Scam

Trusting an email like the “Service Desk” message can lead to serious consequences. Victims may face:

• Identity theft
• Financial loss through unauthorized transactions
• Loss of access to personal or business accounts
• Widespread compromise of associated services and contacts

If you’ve already entered your credentials into such a phishing site, it’s essential to act quickly. Change the passwords of all potentially exposed accounts immediately and notify the official support teams for those services.

Other Phishing Scams to Watch For

The “Service Desk” email is just one of many phishing tactics targeting users today. Other recent examples include “Someone Entered Correct Password For Your Account,” “Account Security Info,” and “DOGE Compensation To Fraud Victims Worldwide.”

While many assume that phishing emails are easy to spot due to spelling errors or awkward formatting, this is not always the case. Some spam campaigns are highly polished and convincingly imitate messages from real companies, institutions, or service providers.

How Phishing Emails Can Deliver Malware

Besides credential theft, spam campaigns often include attachments or download links that deliver malware. These files come in various formats, including:

• Microsoft Office and PDF documents
• OneNote files with embedded content
• Executable files (.exe, .run)
• Archives (ZIP, RAR)
• JavaScript files

In many cases, the malware is activated when users enable editing features or click embedded content. Once launched, the malware can install silently and begin compromising the system.

How to Protect Yourself

The best defense against phishing emails and malware is caution and awareness. Here are some important tips to follow:

• Always scrutinize unexpected or suspicious emails, especially those asking you to click links or open attachments
• Avoid engaging with messages that create urgency or request account verification
• Only download software from official websites and avoid third-party sources
• Never use illegal software cracks or third-party updaters, as they often come bundled with malware
• Keep your operating system, apps, and antivirus software updated
• Run regular scans with a trusted security program to catch and remove threats

If you suspect your device may have been compromised, run a full scan using a reliable anti-malware solution to detect and eliminate any infections.