OneDrive Phishing Awareness

### Executive Summary This report describes a COVID-19-themed phishing campaign targeting Microsoft OneDrive users by impersonating government bodies, consulting firms, and charities to trick victims into submitting credentials on non-Microsoft pages (often hosted on WordPress or other third-party domains). The attackers present fake documents or secured PDFs, show OneDrive-like previews or login prompts, and then capture usernames and passwords; the report includes example scenarios, user guidance (avoid clicking links, verify sender addresses, use MFA), and instructions for reporting scam sites.