avatar

Tom Maddox

@tm4dd0x
Completionist
1 follower1 download48 copies0 likes1,409 views

2 detections

This detection identifies a large-scale phishing campaign utilizing legitimate SharePoint Personal (OneDrive) infrastructure from external organizations to deliver malicious lure documents. By sending notifications via the official no-reply@sharepointonline.com address, the attackers bypass many reputation-based filters and exploit user trust in the Microsoft 365 ecosystem.
avatar
Tom Maddox@tm4dd0x
avatar
Detections.ai Community
7 months ago
320840
This detection identifies a large-scale phishing campaign utilizing legitimate SharePoint Personal (OneDrive) infrastructure from external organizations to deliver malicious lure documents. By sending notifications via the official no-reply@sharepointonline.com address, the attackers bypass many reputation-based filters and exploit user trust in the Microsoft 365 ecosystem.
avatar
Tom Maddox@tm4dd0x
Defender - KQL
7 months ago
160569