Phishers are launching campaigns that leverage fake Office 365 alerts to compromise administrator accounts. 40 percent of organizations told Cyren and Osterman Research that attackers had succeeded in compromising enterprise Office 365 login credentials last year. In May 2019, Bleeping Computer detected a phishing campaign that purported to come from the Office 365 team and warned recipients that their email account was slated for cancellation in an effort to steal their credentials. The attack email prompted recipients to click on an Investigate button that, in turn, redirected them to a fake windows.net domain hosted on Azure.”]