Phishers are impersonating Proofpoint, the cybersecurity firm, in an attempt to make off with victims Microsoft Office 365 and Google email credentials. Armorblox researchers spotted one such campaign lobbed at an unnamed global communications company. The email lure was a file purportedly linked to mortgage payments. The subject line, Re: Payoff Request, was geared to fool targets into thinking it was part of ongoing correspondence. The phish was sent from a compromised but legitimate email account belonging to a fire department in Southern France.”]
Source: https://threatpost.com/proofpoint-phish-microsoft-o365-google-logins/176038/