Outlook On The Mac Is A Phisher’s Wet Dream

I get quite a few phishing emails on some of my email addresses, partially because I like seeing what is “in the wild”.

One of the rather annoying things about Outlook on the Mac in Office 2016 for the Mac is that the email address of a sender is hidden. Sure, you can access it, but you have to dig

So phishers worldwide are probably delighted:

Microsoft probably thinks that doing things this way makes the software more “user friendly”, but unless they really want to make it too easy for phishers to target Microsoft users then their assumptions are seriously flawed. Also worth noting that they’re able to display the receiving address without any issue..

And here’s the payload:

Of course I have a Netflix account so until I looked at the email a bit more carefully it was quite believable.

And if you do click on the link in the email of course you are directed to a dodgy site that the phisher has compromised and is using to collect victims’ credit card details:

So Microsoft seriously fix your bloody software!