Microsoft Office 365 Admins Targeted by Ongoing Phishing Campaign

From bleepingcomputer.com

A new phishing campaign is actively targeting Microsoft Office 365 administrators with the end goal of compromising their entire domain and taking control of all email accounts in one fell swoop.

A new phishing campaign is actively targeting Microsoft Office 365 administrators with the end goal of compromising their entire domain and using newly created accounts on the domain to deliver future phishing emails.

The attackers use phishing emails designed to look like they are coming from Microsoft, with the Office 365 logo shown at the top, and delivered using “validated domains” “from a legitimate organization’s Office 365 infrastructure” as PhishLabs found.