Security News > 2021 > December > How a phishing campaign is able to exploit Microsoft Outlook

A new phishing campaign analyzed by email security provider Avanan exploits a key feature in Microsoft Outlook.

To use Outlook against its users, hackers simply start by devising a phishing email that appears to be sent from an actual person.

Since Microsoft doesn't require verification before updating a user's image in an email, all the necessary and actual Active Directory contact details appear, even with an SPF fail.

Finally, this article from Microsoft partner CodeTwo explains how to prevent internal email spoofing in an organization that uses Exchange.

How phishing attacks spoofing Microsoft are evading security detection.

How to report a phishing or spam email to Microsoft.

News URL

https://www.techrepublic.com/article/how-a-phishing-campaign-is-able-to-exploit-microsoft-outlook/#ftag=RSS56d97e7