While the copy in the email is clearly not from Microsoft, the email address itself looks impressively realistic. This is a ...

In one example, a recipient received an email from Microsoft’s legitimate address, notifying them of changes to email service notifications. Below this legitimate notice, the scammers inserted a ...

After being alerted of the misconfiguration, Microsoft quickly secured the endpoint, which is now only accessible with the required credentials. Names, email addresses, email content, company ...