Phishing campaign is using a fake Microsoft Office 365 update to steal email credentials from business executives, Trend Micro says. Credentials are then offered for sale in underground forums for $250 to $500 each, the report says. The campaign is estimated to have compromised 300 URLs and 70 email addresses, including 40 legitimate email accounts of company CEOs, directors, owners and founders as well as other enterprise employees. The phishing campaign began in May 2020 and is targeting manufacturing, real estate, finance, government and technological industries in several countries.”]
Source: https://www.cuinfosecurity.com/phishing-campaign-features-fake-office-365-update-a-15869