Spear phising via phone?

Forums › Off topic › Spear phising via phone?

KellyP

1250 posts

Uber Geek
+1 received by user: 115

ID Verified

Subscriber

#242818 15-Nov-2018 17:00

This morning I received a number of phone calls from 000018776686536. It was a Microsoft phone verification call for a sign-in (2FA?) however I have not received any email indicating an attempted sign-in.I just ignored it, the automated voice then said "I'm sorry, we cannot sign you in at this time, please try again later."

Anyone else had this recently?

gbwelly

1263 posts

Uber Geek
+1 received by user: 776

#2127341 15-Nov-2018 17:44

Do you use O365 with MFA?
Our MFA source number was blocked recently by Spark and Vodafone. If some clown is putting random numbers in and triggering MFA calls then no wonder it got blocked.

Other option if you do use MFA is that your O365 username and password have been compromised and the attacker is using alternate MFA option to get in hoping you'll press the # key.

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41029

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2127581 15-Nov-2018 22:01

Strange, because 2FA should only initiate the call when the user enters a valid username and password combination. Time to change password?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

KellyP

1250 posts

Uber Geek
+1 received by user: 115

ID Verified

Subscriber

#2127800 16-Nov-2018 09:55

gbwelly: Do you use O365 with MFA?
Our MFA source number was blocked recently by Spark and Vodafone. If some clown is putting random numbers in and triggering MFA calls then no wonder it got blocked.

Other option if you do use MFA is that your O365 username and password have been compromised and the attacker is using alternate MFA option to get in hoping you'll press the # key.

I do have O365 however 2FA is not active (I can't see an option to turn in on?). The number called me on my landline and my landline is not among the MFA options. My mobile is.

Edit: Found 2FA option, now active.

KellyP

1250 posts

Uber Geek
+1 received by user: 115

ID Verified

Subscriber

#2127802 16-Nov-2018 09:56

freitasm:

Strange, because 2FA should only initiate the call when the user enters a valid username and password combination. Time to change password?

Thanks - have changed my password.

gbwelly

1263 posts

Uber Geek
+1 received by user: 776

#2127819 16-Nov-2018 10:38

Sounds like another O365 user has mistakenly entered your landline number as their MFA contact number.