Fortinet Warns Of Sophisticated Phishing Campaign Exploiting Microsoft 365 Domains
SiliconANGLE, Wednesday, January 8th, 2025
A new report out today from Fortinet Inc.'s FortiGuard Labs is warning of a new, sophisticated phishing campaign that leverages Microsoft 365 test domains and distribution lists to bypass traditional email security protocols.
The campaign uses legitimate-looking PayPal Holdings Inc. payment requests to trick victims into providing their account credentials. The approach effectively bypasses authentication mechanisms such as Sender Policy Framework, DomainKeys Identified Mail and Domain-based Message Authentication, and Reporting and Conformance, making detection and prevention challenging for individuals and organizations.