Office 365 “Confirm your billing information” Scam Imitates Microsoft Support

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Scam Targets Microsoft 365 Users with Fake Billing Alerts A phishing campaign is targeting Microsoft 365 users, tricking them into providing sensitive information through fake billing alerts that imitate Microsoft Support. Attackers can gain access to compromised accounts, allowing them to steal credentials, credit card details, and impersonate executives. This scam highlights the vulnerability of businesses to social engineering tactics. 2 sources 22