Microsoft infrastructure exploited in sophisticated phishing campaigns

Cybersecurity researchers have identified a sophisticated phishing campaign that exploits legitimate Microsoft infrastructure to target over 120 organizations globally. According to Check Point Research, attackers used authentic Microsoft login pages to deceive victims. The campaign utilized fake Microsoft Teams notifications, disguised as urgent HR updates regarding payroll and benefits, to trick users into granting permissions to malicious applications.

Parallel developments in email security indicate that artificial intelligence is making phishing attempts more professional and difficult to detect. Microsoft reports that attackers are using AI to personalize messages and conduct identity fraud more effectively. Furthermore, a new threat known as prompt injection is emerging, where manipulated content is designed to influence AI agents like Copilot. In response, Microsoft is expanding its Defender protections to include safeguards for AI systems.