Phishing Attack Takes a Two-Step Approach to Leverage Legitimate Sites and Evade Detection

This report describes a phishing campaign that leverages Microsoft Office Forms as an intermediary to host a seemingly legitimate page which then directs victims to an impersonated login page to harvest credentials; attackers use legitimate services to increase evasion and reduce detection, underscoring the importance of security awareness training and defensive controls.