Scammers Are Abusing an Internal Microsoft Account to Send Spam

2026-05-25

Scammers have been exploiting a loophole that lets them send phishing-style messages from a legitimate Microsoft alerting address, making the emails appear far more credible to recipients. Email authentication alone is not enough when attackers can abuse trusted platforms from the inside, putting more pressure on user awareness and downstream detection controls.