Azure Monitor alert fake (or hacked)

Question

I am getting emails telling me "Your Azure Monitor alert was triggered". The emails are from microsoft.com. Until I got these emails I never heard of Azure. What's going on and how do I fix this?

Answer 1

Hi,

Recently (past few weeks) there have been malicious Azure Monitor Alert messages going out and there is very good chance that is what you are receiving. DO NOT call any phone number(s) in the email messages.

It appears what is happening is bad actors get access to an Azure subscription, set up Alerts with potential victim's email address (your email) set as recipient, then trigger alert. In the text of the alert they mention things like Fraud Prevention System, Windows Defender, some substantial $ amount, potentially unauthorized charge, account suspension, Fraud Resolution Hotline, etc., and their goal is for you to call a phone number.

DO NOT call any phone number in the email and DO NOT click on any links. They want you to call them so they can scam you.

Currently there isn't a good way to make them stop. You could create an email rule to move them to separate folder. I don't recommend blocking them permanently because they are from a real Microsoft email address. The text of the alert is written by the scammers.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP