Sublime Security medium experimental mql

Service abuse: Microsoft Power BI callback scam

Detects callback scam content sent from the legitimate Microsoft Power BI service email address, indicating potential service abuse to distribute fraudulent callback solicitations.

View Source

Detection Logic

type.inbound
and sender.email.email == 'no-reply-powerbi@microsoft.com'
and any(ml.nlu_classifier(body.current_thread.text).intents,
        .name == "callback_scam"
)

Field Validations

Loading…

Comments (0)

Loading comments...