Microsoft 365 Phishing Technique Uses Empty Envelope Sender to Evade Direct Send Blocking

<p>Microsoft 365 users are facing a phishing technique built on a small change: attackers leave the SMTP envelope sender blank. The omission can let an unauthenticated message pass a Direct Send safeguard while showing employees an address that appears to belong to their own organization. The approach is not a Microsoft software flaw and does [&#8230;]</p> <p>The post <a href="https://cybersecuritynews.com/microsoft-365-phishing/">Microsoft 365 Phishing Technique Uses Empty Envelope Sender to Evade Direct Send Blocking</a> appeared first on <a href="https://cybersecuritynews.com">Cyber Security News</a>.</p>