Original Phishing Message

NOTE: If you received this message, please simply delete it as it is not legitimate.

Where Did the Link Lead?

The link led to a fake Microsoft sign in page hosted on https://drambor[.]azurewebsites[.]net/.

Text of Phishing Message

From: sales[@]ams-ltd[.]com
Subject: Your Microsoft 365 Business is expired

Your Microsoft 365 Business is expired .

lnvoice is ready

SlGN IN To The Service Portal.

SlGN lN To Update Your Payment lnformation

Edit release preferences

Choose the release track for your organization. Use these settings to join First Release if you haven’t already.

You’re receiving this email because you’re assigned the Global Administrator .