Phishing Campaign leveraging Google Cloud targets Microsoft 365 credentials

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaigns Target Microsoft 365 Users via Misconfigured Email Settings A series of phishing attacks targeting Microsoft 365 users have emerged, exploiting misconfigured email routing settings and domain spoofing protections. These attacks often impersonate internal communications from HR and IT departments to steal login credentials. The campaigns utilize various technical failures, including SPF and DMARC misconfigurations, to deliver malicious emails. 3 sources 25