Phishing Campaign Uses Internal Email to Trick Employees into Sharing Office 365 Credentials

Phishing emails are a fact of life. Most are caught by corporate security nets and even by commonly used email services. They are also easier to spot, especially if the recipient pays attention to the sender’s real address. Unfortunately, spotting a phishing email becomes much more difficult when it originates from an internal email address. It looks credible and bypasses security measures. Even trained employees could mistake the email for a legitimate one, although there are other markers to look out for. Learn more here