MS Office 365 is one of the tools used by almost every business organization, regardless of whether it is big or small. It is a multi-system platform that combines functions like email, data storage, collaboration, and seamless integration of productivity applications such as OneDrive and SharePoint.
All these tools are, without doubt, valuable to the users and organizations as it smoothens the functioning of the business. However, such a bulk of user data online at one place makes MS Office 365 a mouthwatering target for phishing scams too.
The time when you’re most vulnerable is when you think you’re not. Think about it. If you think you’re vulnerable, you’re likely to do something about it. But if you think you’re okay, you’re likely to rely on the status quo. And that’s the problem Office 365 users are facing right now. They don’t think they’re vulnerable, but they are.
Office 365 comes with email security native to the application, but it must not be very good. How else can you explain the effort hackers put into exploiting Office 365 users AND the success they’ve had doing it?
According to CPO Magazine, “A new phishing attack is being used to steal user credentials from Microsoft SharePoint and OneDrive users. The attack method is reportedly designed to resemble an ordinary Office 365 permissions page [and] takes on the appearance of a credible Office 365 Add-In.”