Phishing Emails Containing Blue Box Lead to Tech Support Scam Sites
The NJCCIC has observed phishing emails containing a clickable blue box attempting to be delivered to NJ State employee email accounts, and have received reports from outside organizations receiving similar messages. These emails contain blue boxes with phrases such as “Display complete,” “Display Message,” or “Display trusted message.” Clicking on the link will likely bring the user to a tech support or survey scam page meant to steal the user’s personal or financial information, or convince them to download malware or remote access software onto their system. The NJCCIC recommends users avoid clicking on links that come with unsolicited or unexpected emails. Microsoft will not contact you regarding suspicious or malicious activity on your device and, therefore, users are advised not to contact any tech support numbers that appear on websites or in pop-up messages.