TLDR Tech / InfoSec
Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries
Microsoft describes a multi-stage credential theft campaign using code-of-conduct themed emails sent via a legitimate mail service to over 35,000 users in 26 countries. Messages use enterprise-style templates, urgent accusations, and PDFs linking to CAPTCHA‑gated flows that lead to AiTM phishing pages harvesting Microsoft credentials and tokens, bypassing MFA.
Read the full story