Phishing - Email certificate expired
Users are receiving messages referring to a supposed incident, informing that their certificate to email server has expired and that they must fill a form in the next 24 hours to get their email working correctly again.
The link opens an external form where attackers request the username, email address and password.