Scammers are abusing an internal Microsoft account to send spam links

Re:Scammers are abusing an internal Microsoft account to sen... by cess11 on Sunday May 24, 2026 @02:51AM (#48255071)

This was a common issue when I consulted with bankruptcy lawyers and had to figure out what domain assets the company had. Commonly the representatives only knew about some of the domains and we found at least a few more.

Same with third party services, sometimes they used one for something for a while and collected customer or user data there and then stopped but kept paying for it, and forgot they had it. We typically found these through analysis of their accounting.

[ Parent | on HN ]

Re:Scammers are abusing an internal Microsoft account to sen... by lostlogin on Sunday May 24, 2026 @04:24AM (#48255561)

Having a service crap out because someone didn’t pay for the domain is almost a trope. It never occurred to me that the reverse might happen - paying for unused domains.

[ Parent | on HN ]

Re:Scammers are abusing an internal Microsoft account to sen... by doubled112 on Sunday May 24, 2026 @09:34AM (#48257177)

We pay for a bunch of old domains because nobody in the org can definitively say we never used it and/or don’t use it anymore.

Easier to just keep paying.

[ Parent | on HN ]

Re:Scammers are abusing an internal Microsoft account to sen... by pixl97 on Sunday May 24, 2026 @12:52PM (#48258903)

Not only have you stopped using it, but did any of your customers ever allow list it in the past? Great way to attack customers of some large businesses if you ever see it happen.

[ Parent | on HN ]

Re:Scammers are abusing an internal Microsoft account to sen... by cess11 on Monday May 25, 2026 @06:54AM (#48265445)

And if you don't squat some domains phishing could be a bit easier than otherwise.

[ Parent | on HN ]