Phishing Attack Bypassed Office 365 Multifactor Protections

Earlier this month, researchers at Abnormal Security uncovered a phishing campaign that spoofed Teams notifications to harvest Office 365 credentials from employees working from home offices due to COVID-19 pandemic (see: Latest Phishing Campaign Spoofs Microsoft Teams Messages)