Microsoft Warns of Phishing Campaign Targeting Over 10,000 Organizations

The threat actors used landing pages designed to hijack the Office 365 authentication process (even on accounts protected by multifactor authentication (MFA) by spoofing the Office online authentication page.