Researchers discovered a new type of advance phishing attack that taking advantages of office 365 vulnerability to bypass all the Microsoft security even though users implemented the Advanced Threat Protection (APT) Researchers say the attack is more sophisticated and persistent. The Z-WASP attack is another chain in a list of exploits that are designed to obfuscate malicious content and confuse Office 365 security. It has the ability to bypass an Office 365s URL reputation check and Safe Links URL protection. The attack is a type of Security bypass method which is used by most of the cybercriminals around the world to embedded the obfuscate links within the phishing emails.”]
Source: https://gbhackers.com/phishing-attack-office-365-vulnerability/