Hackers are stealing Microsoft 365 accounts by abusing link-wrapping services

Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration.

• Crooks are using link wrapping services to entice victims into clicking
• The links redirect the victims to a fake Microsoft 365 landing page
• The campaign has been going on for at least two months

Cybercriminals are abusing Proofpoint’s and Intermedia’s “link wrapping” service to bypass email protections, create convincing phishing emails, and ultimately - steal people’s Microsoft 365 credentials. This is according to cybersecurity researchers from Cloudflare, who have been observing such campaigns in the wild for at least two months.