When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
Security researchers from Perception Point have spotted a new two-step phishing campaign aiming to steal peoplesMicrosoft365login credentials.
It includes compromisedemail accounts, compromised SharePoint accounts, and some convincing - but fake - purchase orders.
The crooks would embed a malicious URL in this file leading to a fake Microsoft 365 login page.