Threat Actors Exploit Google Cloud Services to Steal Microsoft 365 Credentials

Gbhackers •Mayura Kathir • January 7, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaign Exploits Google Cloud to Steal Microsoft 365 Credentials A phishing campaign is utilizing Google Cloud services to bypass security measures and steal Microsoft 365 login credentials. By leveraging legitimate workflow automation tools, attackers are creating convincing phishing attacks that are difficult to detect. This sophisticated approach poses risks to users of Microsoft 365 as it blends with authentic communications. 3 sources 24

Threat Actors Exploit Google Cloud Services to Steal Microsoft 365 Credentials

The full story

Extracted Entities

Attack Types (1)

Platforms (2)