Wednesday 4 November
Global

Your region, kept on this device.

Scammers abuse Microsoft Azure to host fake Windows alerts that push victims to call fraudulent support lines

Severity
Medium
Sources
1

Fake Microsoft support pages hosted on Azure, reached through paid adverts including placements, display fake 'System Error' and 'Windows Firewall' warnings that direct visitors to toll-free numbers. PIXM says the same kit reached users at 80 organisations between March and October 2026, with new landing pages still appearing as of 2 November, though these figures measure exposure rather than confirmed breaches. Callers typically push remote-access software, unnecessary repairs or refund and bank-impersonation schemes.

For IT people · Written by AI from 1 source · Wrong?

What to do

  1. Do not call any phone number shown in a browser warning; close the tab or force-quit the browser instead.
  2. Block the malicious infrastructure listed by PIXM through DNS controls or a secure web gateway.
  3. Restrict remote-access software to approved support workflows.
  4. Warn staff that Windows security alerts appearing in a browser are not reliable evidence of a real problem.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Wed 4 NovemberScammers Use Microsoft Azure to Host Fake Windows Security Alerts Seen at 80 OrganizationsCyber Security News

Who reported · 1 outlet

Cyber Security News

Who and what is in it

Companies

Report a problem