Microsoft Spoofed In 'Microsoft 365 Invoice' Email Phishing Scam

Microsoft 365 Business customers beware, there’s a phishing email currently circulating, purporting to be from Microsoft, with the subject line ‘Re: View Your Microsoft 365 Business Standard invoice’. Trusted by over 300 million customers worldwide, it’s common for scammers to spoof Microsoft to try to steal sensitive credentials from customers. Providing details such as your login email or password to your Microsoft Office 365 account means that cybercriminals can access your email, calendars, contacts and sensitive company information that can be used to design BEC scams, for identity fraud, or sold on the dark web, plus other criminal activity.   

BEC Taxonomy: Invoice Fraud

Beware These New Microsoft Office 365 Phishing Attacks

Microsoft Password Expiration Scam Uses Customized Image to Steal

Office 365 Email Scam - Removal and recovery steps (updated)

Anti-spoofing protection

Unmasking The Overdue Invoice Phishing Scam - MalwareTips Blog

The Microsoft OneDrive phishing email every 0365 business user

Watch out: Another Office 365 Phishing Scam

Is This Microsoft 365 Email Real or a Phishing Attempt? - Evologic

Windows Defender Email Scam - Cybersecurity, Data

New Phishing Scam Using Microsoft Office 365

Microsoft 365 credentials targeted in new fake voicemail campaign