The goal is to steal Microsoft credentials and bypass MFA, the company says.
Microsoft researchers warn of a large-scale phishing campaign using fake compliance emails to steal credentials, targeting 35,000 users across 13,000 organizations worldwide ...