Fake Microsoft Calendar Emails

[Minecraftchest1]

I found a few of these fake "Microsoft Outlook Calendar" emails. in my inbox the other day. I checked, and these events are not in my calendar, nor are these events I would even add.

I looked at the message source (https://files.minecraftchest1.us/FakeEmails/Calendar-Fake-01.eml), and I found a suspiciously short set of email headers. ( A legitimate email from Microsoft Family Safety: https://files.minecraftchest1.us/FakeEmails/FamilySaftey-Real.eml for comparison).

 

My question is what even is the point of emails like this? It doesn't really look like a fishing email to me (the link address looks legitimate to me, haven't clicked them), and I don't see any other way this email could work as a scam or similar.

 

I don't know if this is related, but I did see this in my account activity. I do have 2FA enabled on my account, so I am not that concerned about it. Just figured I would mention it.

 

[LogicalDrm]

Not all spam is about sending phisting links. Some are just fishing. They get lists of emails from data leaks and sites selling data (emails, phone numbers, actual addresses), then send mass emails to verify if email is still active. So just by your inbox letting it through, confirms address is active. If you were to respond in any way (even open if they send with "received confirmation") tells its actively used. In which case they would send actual phisting/scamming stuff, and sell that address onward to others.

 

Majority of the spam I get doesn't contain any links. Just random stuff like "Hey how are you".

[Minecraftchest1]

5 hours ago, LogicalDrm said:

Not all spam is about sending phisting links. Some are just fishing. They get lists of emails from data leaks and sites selling data (emails, phone numbers, actual addresses), then send mass emails to verify if email is still active. So just by your inbox letting it through, confirms address is active. If you were to respond in any way (even open if they send with "received confirmation") tells its actively used. In which case they would send actual phisting/scamming stuff, and sell that address onward to others.

 

Majority of the spam I get doesn't contain any links. Just random stuff like "Hey how are you".

Thanks. I forgot about read receipts and tracking pixels and the like.