It’s Not Safe: “Security Update” Goes Phishing via PDF

Cofense has observed an Office 365 credential phishing campaign, masquerading as an Outlook Security update email from the IT Security department to lure employees to open a “New Policy” PDF.