There's a rash of scam spam coming from a real Microsoft address
Scammers are using a legitimate Microsoft email address, no-reply-powerbi@microsoft.com, to send scam spam emails claiming false charges and providing a phone number for disputing transactions. The emails aim to trick recipients into downloading a remote access application to take control of their devices. Multiple reports of this scam have surfaced, with some victims falling for the scheme. Security experts suggest that scammers are exploiting a Power BI function that allows external email addresses to be added as subscribers, making it easier to miss the scam mention at the bottom of the email.
Ars Technica•