A new phishing campaign is targeting Microsoft Office 365 administrators with the end goal of compromising their entire domain. The phishing emails are designed to look like they are coming from Microsoft, with the Office 365 logo shown at the top, and delivered using “validated domains”” “”from a legitimate organization s Office 365 infrastructure”” as PhishLabs found. They also use “”Services admin center”” as the sender name for the phishing messages delivered through this ongoing campaign as an attempt to spoof the legitimate Microsoft 365 admin center support team.”
Source: https://www.bleepingcomputer.com/news/security/microsoft-office-365-admins-targeted-by-ongoing-phishing-campaign/