System Notification Abuse Microsoft Phishing
Source: abnormal.ai
Published:
<p>Attackers exploit Microsoft Entra ID to inject malicious messages into legitimate system emails, bypassing authentication and deceiving users.</p> <p>Attackers love exploiting legitimate platforms, using tools like Gamma, Canva, and Google Drive to host phishing pages and other malicious content.