Microsoft Account Notification System Hijacked to Deliver High-Trust Phishing Campaigns

Cybercriminals are exploiting a loophole in Microsoft’s automated notification system to send phishing links from legitimate internal addresses.