Energy Sector Targeted by Phishing Campaign via Microsoft SharePoint

Unknown attackers are exploiting Microsoft SharePoint file-sharing services to target multiple energy-sector organizations. The campaign involves harvesting user credentials, taking over corporate inboxes, and sending hundreds of phishing emails from compromised accounts to contacts both inside and outside these organizations. The attackers likely gained initial access using previously compromised email addresses.