Attackers exploit link-wrapping services to steal Microsoft 365 logins

The campaign involves threat actors abusing link-wrapping services from trusted providers such as Proofpoint and Intermedia to disguise malicious URLs that lead to Microsoft 365 credential harvesting pages.