Attackers use emails designed to look legitimate (from Microsoft, your bank, or even your own company) to steal credentials. Here's Ornet's quick checklist to keep in mind:
The name might say "Microsoft Support," but when you click on it you'll see the email was actually sent from a forged address like [email protected]. If it's not the official domain - it's fake.
"Your account will be blocked within 24 hours," "urgent payment overdue notice." Attackers want you to panic and act fast without thinking. Slow down, breathe, and check again.
Before you click on a button or link, hover your mouse over it (without clicking!). At the bottom of your browser, you'll see the actual link's real destination address. If it looks suspicious - don't click.