What Is Happening?
Security researchers at BleepingComputer have observed a rapidly expanding phishing campaign that sends multiple scam emails per day. The messages impersonate cloud‑storage providers and claim that a payment problem or storage limit issue must be resolved immediately, or the victim’s files will be deleted or blocked.
Common Tactics Used by the Scammers
- Urgent, fear‑based language that demands immediate action.
- Personalized subject lines containing the recipient’s name, email address, or a fabricated account ID.
- Fake subscription renewal or expired‑payment notices that reference cloud‑storage services.
- Links to counterfeit “storage scan” pages that falsely report full storage and prompt a “loyalty” upgrade at an 80% discount.
- Promotion of unrelated products such as VPNs or obscure security software to harvest credit‑card details.
Typical Indicators of the Fake Emails
- Sender addresses from randomly generated domains (e.g.,
xavpy@njyihuhzhyjumdjenwdsugjsku.us,hxsupportxf@bjmbsjabnjjvdfdlntduihco.com). - Subject lines that mix urgency with personal details, e.g., “Immediate Action Required – Your backup will be deleted today”.
- Made‑up account numbers, subscription IDs, and expiration dates.
- Calls to action that direct users to a “Continue” button leading to a fake storage scan.
- Offers of a limited‑time discount for a “loyalty” upgrade that is unrelated to any legitimate cloud service.
How to Protect Yourself
- Do not click links or download attachments from unexpected cloud‑storage alerts.
- Verify any billing or storage issue by logging directly into the official provider’s website or app—never through email links.
- Check the sender’s email domain for legitimacy; reputable providers use official corporate domains.
- Enable multi‑factor authentication (MFA) on all cloud accounts.
- Keep anti‑phishing filters and security software up to date.
What to Do If You’ve Already Clicked
If you clicked a link or entered information, immediately change passwords for the affected account, monitor your financial statements for unauthorized charges, and consider placing a fraud alert with your bank. Report the phishing email to the legitimate cloud provider and to your organization’s security team.