Phishing Campaign Exploits Mimecast Links to Target SharePoint Users

Threat actors have exploited Mimecast's secure-link rewriting feature to send over 40,000 phishing emails that impersonate SharePoint and DocuSign. These emails, which included Microsoft branding and fake display names, aimed to deceive recipients into clicking malicious links disguised as legitimate notifications. The campaign highlights the vulnerabilities in digital communication platforms widely used in various industries.