Chipotle’s marketing account hacked to send phishing emails

Most of the messages directed users to credential-harvesting sites impersonating services from a financial business and Microsoft. A very small number had malware attachments.