Watch out — Microsoft login pages are being abused as hackers try and lure in unlucky victims, here's what to…
- Phishing campaign used fake Teams notifications to route victims to a genuine Microsoft sign-in page
- Rather than stealing passwords, attackers asked victims to approve permissions for an attacker-controlled app, gaining access to mail, files, Teams, SharePoint, OneDrive and calendars without defeating MFA
- Check Point says the technique has been commoditized in 2026 into a rentable service; the practical defense is restricting app consent rather than relying on users to spot a fake
A phishing campaign that ran from late June into July 2026 did something that breaks most of the advice organizations have spent a decade teaching their staff: it sent victims to a real Microsoft login page.
Check Point's email research team, which disclosed the campaign, identified more than 200 phishing emails targeting users across roughly 120 organizations worldwide.
The lure was a fake Microsoft Teams notification with a genuine destination; what actually compromised accounts was not a...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
