Warning: New Spear Phishing Campaign Targets Executives

Researchers at Stripe warn of a targeted spear-phishing campaign impersonating OneDrive/Office document-sharing notifications aimed at C-suite and senior leadership; emails are personalized with recipient and company details and employ obfuscated button text to evade secure email gateways, leading to credential theft via spoofed Microsoft login pages. Recommendations include executive and assistant awareness training, scepticism towards unexpected HR/payroll documents, rapid escalation of suspicious emails, and clear reporting processes.