Suspicious email aimed to get users to give up Office 365 credentials

A phishing scheme discovered by Abnormal Security involved an email impersonating a vendor to bypass the victim’s Proofpoint gateway and set up a trap to steal Office 365 credentials.