Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Cybersecurity researchers flagged a widespread phishing campaign using adversary-in-the-middle techniques to hijack Microsoft 365 accounts. The campaign targets personnel involved in financial workflows to collect payroll and finance emails. It employs residential proxies to disguise malicious sign-ins as ordinary consumer traffic, enabling attackers to maintain access and gather sensitive email data from compromised accounts.