Phishers Exploit Office 365 Users Who Let Their Guard Down

Microsoft Threat Intelligence reports an increase in phishing campaigns that spoof organization domains in Office 365 by abusing complex routing and misconfigured spoof protections; attackers, including those using PhaaS platforms like Tycoon2FA, deliver credential-stealing and BEC-style lures. Microsoft recommends enforcing strict DMARC/SPF, properly configuring third-party connectors, and adopting phishing-resistant MFA to mitigate these attacks.