Login
Crims compromised energy firms' Microsoft accounts, sent 600 phishing emails
22 January 2026 at 20:18
Logging in, not breaking in
Unknown attackers are abusing Microsoft SharePoint file-sharing services to target multiple energy-sector organizations, harvest user credentials, take over corporate inboxes, and then send hundreds of phishing emails from compromised accounts to contacts inside and outside those organizations.…
