Malicious Office 365 Apps Are the Ultimate Insiders – Krebs on Security

These attacks begin with an emailed link that when clicked loads not a phishing site but the user’s actual Office 365 login page — whether that be at microsoft.com or their employer’s domain.