[email protected] Documents Received OneDrive Spam

This email is an impersonation of Microsoft but has a homespun email address and so should be quite easily to spot.

From: Marissa Carnahan [[email protected]]

Sent: 18 October 2018 17:49

To: Recipient

Subject: [email protected] Document Received

ΟneDriυe

recipient, Yοu have new dοcuments sent tο yοu via ΟneDriνe

Receive # Document #Fοr PΟ (DF70508900)

They have apparently respelt OneDrive in order to avoid detection which seems odd as you wouldn't really think that 'OneDrive' would make even a component of rejection rules on any system, as anyone could be using it in conversation with anyone.

The way they reformat the address to add the email name in the sentence is effective though, although they have not thought to check if the email is firstname.surname and just added the pre '@' string instead.

The link actually points to: https://urtherapy.me/PL/maykris/New/?lemzfyVct4YesODOv5lclemzfyVct4YesODOv5lcieU2fPsIsg2xNjhedCcyqhMo5OT2OYRDf96bJdKolemzfyVct4YesODOv5lca82ohWPgLKLHfVWRnzC3&[email protected]&ieU2fPsIsg2xNjhedCcyqhMo5OT2OYRDf96bJdKolemzfyVct4YesODOv5lc

Which has already been marked as deceptive by Google Chrome and unsafe by Microsoft Edge so there should not be too many successful cons from this one. :)