Watch out for suspicious Microsoft Azure Monitor alerts it could be this shifty new callback phishing attack

Date:
Mon, 23 Mar 2026 14:00:00 +0000

Description:
No, Azure Monitor did not just notify you, even though the mail came from its domain.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Get the TechRadar Newsletter Sign up for
breaking news, reviews, opinion, top tech deals, and more. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are
now subscribed Your newsletter sign-up was successful An account already exists for this email address, please log in. Subscribe to our newsletter Phishing campaign abuses Microsoft Azure Monitor alerts Fake suspicious charges emails bypass protections using legitimate domain Attackers craft alerts with custom messages, similar to past Google Tasks and PayPal abuse Microsoft Azure Monitor is the latest in the long line of legitimate tools being abused in phishing attacks. If you are used to getting notifications from this platform, be careful, as the emails are quite convincing and relatively difficult to spot.

Microsoft Azure Monitor is a cloud-based service that collects and analyzes data from applications and infrastructure, helping users monitor performance, detect issues, and respond to problems in real time. In recent times, users have been getting emails directly from this platform, notifying them of suspicious charges and invoice activity. Article continues below You may like Yet another phishing campaign impersonates trusted Google services - here's what we know Watch out: hackers are hijacking Microsoft Teams messages to try and get access to your emails - here's what you need to look out for
Microsoft warns of new signed malware which deploys remote monitoring tools
as backdoors Using mailing lists The emails encourage the recipients to call the phone number provided in the alert, to sort the problem out. Many also state that the accounts are temporarily suspended, or that the funds are
being placed on hold.

Since they are coming directly from Microsoft Azure Monitor, using a legitimate, trusted domain, these alerts largely bypass email protection services and land directly into peoples inboxes.

But these are not real alerts. As explained by BleepingComputer, whos seen these campaigns in action, anyone can create alerts in Azure Monitor for easily triggered conditions such as new orders, payments, generated invoices, and other billing alerts. Whoever creates the alerts can also create the message to be sent in the description field, and that is where the fake warning is usually placed.

Finally, the attackers can set up the alert to be sent out to people on specific mailing lists. In this case, these lists are owned by the attackers, as well. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

So, the MO is like this: set up an alert, trigger it, and send the notification to everyone on a predefined mailing list.

It is a simple and effective technique that weve seen being used before. In late February, TechRadar Pro reported on a similar campaign abusing Google Tasks , and before that, PayPal .

Via BleepingComputer The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/watch-out-for-suspicious-microsoft-azur e-monitor-alerts-it-could-be-this-shifty-new-callback-phishing-attack


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)