Microsoft customer feedback tool hijacked to send phishing emails

Cybercriminals are trying to trick Microsoft Dynamics 365 Customer Voice users into giving away their login credentials with a devious new phishing campaign, experts have warned,A report from Avanan has revealed threat actors would send out a notification email through Dynamics 365 Customer Voice, which states that the customer had left a voice message. With the email itself looking a lot like an important voicemail from the customer, and the link being legitimate, clicking on it is “the natural step”, the researchers said. Dynamics 365 Customer Voice is Microsoft’s customer relationship management (CRM) tool that businesses use to survey customers, monitor and organize customer feedback, and turn feedback data into actionable insights.

Read more