Ars Technica has identified a scheme that abuses a Microsoft subscription feature to send phishing emails from [email protected], a real address that the company advises users to add to their allow lists. How the Microsoft Power BI scam worksUsers targeted with this scam have received emails from an address connected to Microsoft Power BI, a business analytics platform. As with any phishing scam, engaging in any way—calling the number, responding to the email, or clicking links—could put your data and your device at risk. The emails themselves are full of typos and grammar errors and urgent calls to action that are, in most cases, completely unrelated to Microsoft itself. With Google, scammers registered google.com subdomains via Google Sites and linked them with Google Accounts.