Microsoft is warning users about fake callers tricking people into installing ransomware. The ransomware encrypts the computer's files and requests a ransom paid in cryptocurrency.
- The scam sends users an email notifying them their trial subscription to Microsoft Office 365 has ended and requests that they call a listed customer service number to avoid billing.
- From there, the caller directs the victim to an infected Excel spreadsheet and after the deed is done tells the victim the subscription has been canceled.
- Unknown to the victim, BazarLoader begins to provide backdoor access to the infected Windows host.
- Microsoft Security Intelligence announced via Twitter that it was tracking the situation.