Attackers call employees’ personal phones to break into Microsoft 365 accounts

September 10, 2026 · 1:26 pm 1 sources

Image: Help Net Security

Coverage

Coverage

• Attackers call employees’ personal phones to break into Microsoft 365 accounts
  Help Net Security · September 10, 2026 13:26
  Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts. Once inside, they pull files and email from Microsoft 365 apps, SharePoint, OneDrive, and…