Phishing Campaign Uses Internal Email to Trick Employees into Sharing Office 365 Credentials

A campaign targeting Office 365 customers used a compromised internal email for phishing messages, giving much more credence to an email that people would otherwise dismiss immediately.