Cybersecurity researchers have called attention to an active « widespread email-driven phishing campaign » that employs adversary-in-the-middle (AitM) techniques to take control of Microsoft 365 accounts with an aim to identify key personnel involved in financial workflows and gather related email.
« The campaign uses residential proxies to disguise malicious sign-ins as ordinary consumer traffic,