MICROSOFT WARNS OF PHISHING CAMPAIGN EXPLOITING MICROSOFT 365 OUTAGE
Microsoft has warned organizations about an active phishing campaign exploiting the November 12 Microsoft 365 outage. Microsoft Threat Intelligence said attackers are impersonating official Microsoft 365 service-health notifications and referencing the genuine Exchange Online incident EX1550543. Some fraudulent emails claim that messages held during the outage will be deleted within 24 hours unless recipients click a recovery link. Microsoft says the activity is consistent with credential phishing, although successful credential theft or malware delivery had not been confirmed at the time of the warning. The original Microsoft 365 outage was attributed to infrastructure problems, and Microsoft said there was no evidence it had been caused by malicious activity.