Are emails for "Your Azure Monitor alert was triggered" from azure-noreply@microsoft.com legit?

Question

I received emails from azure-noreply@microsoft.com about Azure monitor warnings with details about attempted transactions for windows defender and shortly after I receive an email with title Your Azure Monitor alert was resolved and then subsequent details.

I do not recall setting up Azure but it is possible I did. I checked my account and do not see any Azure subscription.

Are these emails legitimate? How can I talk to an actual person about this?

Answer 1

Hi Michael,

Your description matches recent malicious alert e-mails. It appears what is happening is bad actors get access to an Azure subscription, set up Alerts with potential victim's email address (your email) set as recipient, then trigger alert. In the text of the alert they mention things like Fraud Prevention System, Windows Defender, some substantial $ amount, account suspension, etc., and their goal is for you to call a phone number.

DO NOT call any phone number in the email and DO NOT click on any links. They want you to call them so they can scam you.

If you would like me to review the email to double-check you may post it in a comment as a .txt attachment. Please remove your email address from the email text for privacy reasons.

NOTE: In a sense, the emails are "legit" in that they are coming from a real Microsoft email address, however, the text contained in the alert emails are written by scammers trying to trick you into calling them.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP