Security News > 2020 > March > Why Microsoft's Office 365 has become an all-access pass for phishers to exploit

With so many people and organizations using Microsoft Office 365, phishers who exploit this brand can target a vast amount of people as a way to steal their account credentials, as described by Vade Secure.
Phishing attacks that exploit Office 365 come in different varieties, according to Adrien Gendre, chief solutions architect at Vade Secure.
In some cases, hackers copy the CSS from the real Office 365 login page and use it to build their phishing page.
"Overall, the sophistication of these attacks is growing, with many Office 365 phishing pages being virtually indistinguishable from the real thing," Gendre said.
The overall goal of these type of phishing attacks is to steal Office 365 credentials, according to Gendre.
News URL
Related news
- Microsoft fixes Office 365 apps crashing on Windows Server systems (source)
- Microsoft 365 apps crash on Windows Server after Office update (source)
- Microsoft ends support for Office apps on Windows 10 in October (source)
- Hackers exploit Cityworks RCE bug to breach Microsoft IIS servers (source)
- HPE notifies employees of data breach after Russian Office 365 hack (source)
- FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux (source)