Microsoft Warns of Year-long Evasive Office 365 Phishing Campaign Active Since July 2020

The ongoing phishing campaign lures targets into handing over their Office 365 credentials using invoice-themed XLS.HTML attachments and various information about the potential victims.