I'm receiving what appear to be fake emails from MSSecurity-noreply@microsoft.com regarding Azure

OSWALD NORTON 30

I do not have an Azure Account and yet I'm receiving this email;

Subject: New recommendation available for mackene834claugus

Body: You have a new recommendation for mackene834claugus

Do not allow users to grant consent to unreliable applications

See why this recommendation was generated for your directory and how to remediate it in the Microsoft Entra admin center.

Learn more about Microsoft Entra recommendations>

OSWALD NORTON 30 Reputation points

2025-01-07T00:18:27.9266667+00:00

AI solution was completely irrelevant.

Accepted answer

Q&A Assist

2025-01-07T00:14:18.3933333+00:00

AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more
Receiving unexpected emails from MSSecurity-noreply@microsoft.com, especially regarding Azure recommendations, can be concerning. Here are a few potential reasons for these emails:

Group Membership: You might be part of a group that is receiving these notifications. Check if your email address is included in any distribution lists or groups that could be receiving these emails.

Unexpected Subscription: It's possible that an unexpected subscription is triggering these emails. You can inspect the footer of the email for a link to view the subscription that triggered it.

Contact Support: If you cannot determine the reason for these emails, consider contacting customer support for further assistance.

It's important to ensure that your email address is not associated with any Azure accounts or services you are unaware of.

References:

Why did I get this email

What are Microsoft Entra recommendations?
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

1 additional answer

Givary-MSFT 35,126 Reputation points Microsoft Employee

2025-01-08T04:54:39.0566667+00:00

@OSWALD NORTON Thank you for reaching out to us. We apologize for the AI-generated response and will share your feedback with our team to help improve it.

Microsoft Entra recommendations generate email notifications when a new recommendation is generated.

With respect to this recommendation - Do not allow users to grant consent to unreliable applications

Refer to these docs -

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-user-consent?pivots=portal

https://janbakker.tech/microsoft-secure-score-series-09-do-not-allow-users-to-grant-consent-to-unmanaged-applications/

https://learn.microsoft.com/en-us/answers/questions/1007612/secure-score-do-not-allow-users-to-grant-consent-t - similar recommendation has been answered by one of our community experts in the past.

Let me know if you have any further questions, feel free to post back.
Please sign in to rate this answer.
OSWALD NORTON 30 Reputation points

2025-01-08T18:41:43.82+00:00

I'm not sure if this answer was also AI generated - BECAUES IT'S TOTALLY WRONG.

AGAIN!!! I DO NOT HAVE AN AZURE ACCOUNT OR DATA STORED ON AZURE THAT WOULD HAVE CAUSED THIS EMAIL TO BE GENERATED IN THE FIRST PLACE.

ALSO this app thar records answers IS TOTALLY BROKEN. IF I ANSWER NO ABOVE AND TRY TO ENTER WHY, NOTHING!!! HAPPENS. When I click submit after entering my answer to why it doesn't answer my question, the reason is not posted

Givary-MSFT 35,126 Reputation points Microsoft Employee

2025-01-09T08:32:46.61+00:00

@OSWALD NORTON If I understand correctly from your comment, your email account is not currently associated with any Entra ID directory. However, receiving this email suggests that your account might have been part of a directory in the past, possibly one with Global Admin privileges, which is why you received this notification.

If you are aware of any directory you were previously associated with, you may want to inform them about this notification and request them to delete your account from their directory. Alternatively, if you are confident that you no longer have any presence within Entra ID, you can disregard this email notification.

If this information doesn’t resolve your query, I’d be happy to connect with you over Teams to discuss this further.

OSWALD NORTON 30 Reputation points

2025-01-09T17:22:01.28+00:00

I have not worked at Microsoft since I helped launch Windows Azure. I was never involved in any services setup, After Microsoft, I never participated in any services that were deployed on Azure. So, I'm confused as to why I would be associated with any directory. Unless some phishing organization has been using Azure services to try to accomplish something.

AND I have no way to contact anyone involved with my past efforts at Microsoft.

So, let's just leave this as unresolved for now. If I receive further Microsoft Entra messages, I will add that information to this thread.

Due to recent hacking into Microsoft Azure services, I just thought that this might be something that the team would want to know.

Givary-MSFT 35,126 Reputation points Microsoft Employee

2025-01-10T03:54:41.5333333+00:00

@OSWALD NORTON Thank you for your email, lets discuss the offline.

Vixxd 0 Reputation points

2025-01-10T12:57:54.3566667+00:00

Hi @Givary-MSFT , I've also received similar e-mails recently.

This account I am posting from, and the one I received the e-mail to, is my personal outlook account.

There is no Azure, Active Directory, or any such other technical administrative products associated it AFAIK. The account mentioned in the e-mail I received (manpreet705mccavitt) also matches the same pattern as the one OP @OSWALD NORTON mentioned (name - 3 digits - name).

Concerned re: my account security so interested to see what's going on here, thanks.

Emails:

Wed 01/01/2025 01:16 From: MSSecurity-noreply@microsoft.com You have a new recommendation for manpreet705mccavitt Do not allow users to grant consent to unreliable applications See why this recommendation was generated for your directory and how to remediate it in the Microsoft Entra admin center. Learn more about Microsoft Entra recommendations

Wed 01/01/2025 01:16 From: MSSecurity-noreply@microsoft.com You have a new recommendation for manpreet705mccavitt Enable password hash sync if hybrid See why this recommendation was generated for your directory and how to remediate it in the Microsoft Entra admin center. Learn more about Microsoft Entra recommendations

Vixxd 0 Reputation points

2025-01-10T13:12:33.9466667+00:00

I can see another similar query here: https://learn.microsoft.com/en-us/answers/questions/2139835/strange-concerning-emails-from-microsoft-security

I was added as a guest external user of an organisation (for an online class in 2023), and forcibly removed myself from that organisation after receiving these e-mails. I wonder if that was the cause?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

I'm receiving what appear to be fake emails from MSSecurity-noreply@microsoft.com regarding Azure

1 additional answer

Your answer