Multiple malicious phishing pages hosted on Azure targeting Cooperativa Alianza del Valle

Juan Fernando Mejía 0 Puntos de reputación
2026-05-18T17:07:54.09+00:00

Dear Microsoft Azure Safeguards Team,

We are contacting you again on behalf of Cooperativa Alianza del Valle regarding several active phishing websites hosted on Azure Static Web Apps / Azure CDN (*.web.core.windows.net) that continue to impersonate our financial institution.

We recently attempted to report the following phishing URL through the MSRC reporting form:

However, although we received the automatic confirmation email indicating that the report was received, no reference ticket number was provided. We are attaching screenshots showing how the confirmation email arrives without a valid ticket number for your review.

Additionally, the following phishing URLs remain active:

These sites are clearly part of an ongoing phishing campaign targeting our institution and customers. We do not understand why these pages have not yet been taken down, as the phishing activity and brand impersonation are evident.

Reference tickets associated with previous reports:

  • SIR23494874
  • SIR23503619
  • SIR23506040
  • SIR23559183
  • SIR23543640
  • SIR23566587

This is an urgent Severity A incident involving active phishing and abuse of Microsoft Azure infrastructure.

We urgently request:

  • Immediate takedown of all reported phishing URLs
  • Review of the MSRC reporting/ticketing issue
  • Confirmation of actions taken regarding these reports
  • Investigation into the abusive Azure resources involved

Our only official website is: https://servicios.alianzadelvalle.fin.ec/cooperativa-en-linea/#/

We appreciate your urgent attention and await your prompt response.

Sincerely, Cooperativa Alianza del Valle

Azure Blob Storage
Azure Blob Storage

Servicio de Azure que almacena datos no estructurados en la nube en forma de blobs.


Su respuesta

Las respuestas pueden ser marcadas como Respuestas aceptadas por el autor de la pregunta, lo que indica a los usuarios que la respuesta resolvió su problema.