The Register
Attacker phished way into US defense supplier's Microsoft 365 account
An attacker phished a US defense supplier's employee to compromise their Microsoft 365 account. The attacker posed as a business contact and sent a fake Microsoft sharing link, gaining access to the organization's email environment and sensitive data.
AI summary · generated with Claude