Hackers disguise phishing as promising business opportunities

Researchers observed a large increase in RFQ-themed phishing targeting sales and procurement staff: short, believable inquiry emails elicit replies and then deliver links to fake Microsoft/Google sign-in pages (or malware) to steal credentials, MFA codes, cookies, or session tokens; the campaign spans hundreds of sender domains and risks account takeover, payment diversion, invoice fraud and data exposure.