The emails, analyzed by researchers from Malwarebytes, inform recipients that their Hotmail account service has expired and that they have to sign in to reactivate it.
“Dear User, All Hotmail customers have been upgraded to Outlook.com. Your Hotmail Account services has expired. Due to our new system upgrade to Outlook. In order for it to remain active follow the link Sign in Re-activate your account to Outlook. account.live.com,” the scammy emails read.
The link from the bogus notification points to a phishing website that replicates the Outlook.com login page. The phishing site spotted by Malwarebytes is hosted on a compromised Sake website whose owners are probably not aware of the fact that they’ve been hacked.