An ongoing spear-phishing campaign is spoofing the official Microsoft domain name and targeting users of the company’s Office 365 suite. Nearly 200 million users of Office 365 could be at risk since the messages originate with a spoofed domain that is an exact replica of the Microsoft.com domain name. The phishing emails have been located in a few thousand mailboxes to date, according to a report by security firm Ironscales. In this campaign, the fraudsters are likely attempting to harvest users’ credentials.”]
Source: https://www.cuinfosecurity.com/fresh-spear-phishing-email-spoofs-microsoft-domain-a-15547