Microsoft SharePoint exploited to hack multiple energy firms

A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system.

• Hackers exploit SharePoint emails to steal credentials from large energy firms
• Attackers establish persistence with inbox rules and MFA tampering to maintain access
• Microsoft advises conditional access policies and phishing-resistant MFA for defense

Hackers are, once again, using SharePoint to target large energy firms, steal employee email credentials, and propagate the attack further.