This Microsoft phishing campaign can hack you, even if you have MFA

Hackers are able to hijack Outlook email accounts even if they’re protected by multi-factor authentication, Microsoft has warned.  The company’s cybersecurity teams from the Threat Intelligence Center, and the Microsoft 365 Defender Research Team have uncovered (opens in new tab) a new large-scale phishing campaign that targeted more than 10,000 businesses in the past year. Amazon Prime Day deals: see all the best offers right now!The compromised email accounts are later used for business email compromise (BEC) attacks, in which the victim’s business partners, clients, and customers, end up being defrauded for their money.

Read more