🔔 Phishing is arriving from Microsoft’s real notification addresses, and it passes SPF, DMARC and Microsoft’s own sender checks. Most mail apps show no warning. Our email security team traced how these lures get through and wrote up how to detect them:
reconinfosec.com/articles/messa…
reconinfosec.com/articles/messa…
www.reconinfosec.com Catch Phishing That Passes DMARC From Microsoft's Own Address - Recon InfoSec Phishing is arriving from Microsoft's real notification addresses and passing SPF, DMARC and Microsoft's own checks. What we found and how to detect it. 
