Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Odd, I just received this email from MS that looks a lot like phishing but seems not to be?

> Action required: Enable multifactor authentication for your tenant by 15 October 2024

> You’re receiving this email because you’re a global administrator for [Literally a UUID here, no organization name or anything] Starting 15 October 2024, we will require users to use multifactor authentication (MFA) to sign into the Azure portal, Microsoft Entra admin center, and Intune admin center. To ensure your users maintain access, you’ll need to enable MFA by 15 October 2024.

> If you can’t enable MFA for your users by that date, you’ll need to apply to postpone the enforcement date. If you don’t, your users will be required to set up MFA.

> Action required

> To identify which users are signing into Azure with and without MFA, refer to our documentation. > To ensure your users can access the Azure portal, Microsoft Entra admin center, and Intune admin center, enable MFA for your users by 15 October 2024. > If you can’t enable MFA by 15 October 2024, apply to postpone the enforcement date.

The thing is, I'm not administrating any organization with Microsoft.

I have a private office365 family account or whatever it's called, and I have 2FA set up for my account, I have no idea what they are on about, especially because the email doesn't contain even my name or the name of the supposed organization, just some ID.

It's definitely an Email from Microsoft though.



Login to azure portal. You should see a similar message that redirects you to the relevant resource


Spot on! It was in fact some Azure account I made years ago, in hindsight, it did say to log into the azure portal right in the email. The random UUID instead of salutation threw me off a bit.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: