This is an excellent #phishing email; kudos to this threat actor.

- From address is legit (DKIM passed, etc.)
- M365 admin center link is legit

This is a legitimate purchase of Microsoft services - but I didn't make it! How can this be? What's the "phish"? 👇🏻
Post image

Comments