Unmasking Business Email Compromise: Safeguarding…

The report outlines Business Email Compromise (BEC) threats against Microsoft 365, detailing attacker methods (AitM, MFA fatigue, voice phishing), common post-compromise actions (external forwarding and inbox rules), detection approaches (suspicious geographic sign-ins, Defender for Cloud alerts, inbox-rule audits with PowerShell), and mitigation recommendations such as phishing-resistant MFA, conditional access, disabling auto-forwarding, and security awareness training.