Phishing attack exploiting Microsoft services

In recent days Yazam Email identified and blocked a sophisticated attack campaign built on email-borne files that appeared completely legitimate at first glance. The campaign relied on subtle evasion techniques, including malicious URLs hidden within complex structures, dynamic URL assembly at runtime, and redirection mechanisms triggered only during execution.