
M365 Phishing via Personal Phones
Microsoft Security Research disclosed that threat actors launched a widespread social engineering campaign targeting enterprise employees on personal mobile phones to compromise Microsoft 365 cloud accounts. Attackers posed as internal IT helpdesk staff via phone calls and text messages, manufacturing urgency by claiming passkeys or multifactor authentication settings required immediate...








