'Your Password Is About To Expire Tomorrow' Scam
A new malicious email campaign is actively pushed online, distributing a scam named "Your password is about to expire tomorrow".
The setup of the scam is painfully simple and we've seen it dozens of times before, but for some reason, it still seems to work, given how persistent scammers are with using the same lure.
Potential victims receive an email that claims the victim's email password will expire "tomorrow". While it is true that certain high-level security measures can lead to passwords expiring after a certain period of time, this is by no means a common thing.
The victim is given a link to click to supposedly "keep current password". Clicking this only brings up a phishing page operated by the scammers that will attempt to harvest the user's credentials, if they enter this information on the fake login portal.
The full scam email goes as follows:
Dear (victim)
Your password for (victim email) is about to expire tomorrow. You can change your Password or continue using current Password.
Keep Current Password
you may visit ******** /activity? to see email activity
© 2022 ******** All rights reserved
Please note this is an unattended mailbox. Please do not reply
Disclaimer Warning: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information.
If you are not the intended recipient of this message any dissemination, use, review, distribution, printing or copying of the
information contained in this e-mail message and/or attachments to it are strictly prohibited and you are requested to notify the sender & delete this message from your system.