The Teams Invite That Came From the Wrong Domain: Display-Name Impersonation With All-Legitimate Links
A Microsoft Teams notification email arrived at a regional banking institution with a display name matching an internal employee exactly. SPF and DKIM passed at the initial authentication hop via a...
Read more