Microsoft Finds Active Phishing Campaign Exploiting Service Disruption

Microsoft Threat Intelligence on Saturday found that an active phishing campaign was exploiting the Microsoft 365 service disruption on November 12. The messages, it said, impersonate notifications from Microsoft, referencing legitimate Exchange Online incident EX1550543. “Some of the phishing emails Microsoft detected on November 13 falsely claim that messages were held during the outage and will be deleted within 24…