Legitimate Microsoft SharePoint notifications are fooling even the most tech-savvy workers as threat actors look to set up phishing scams to target more businesses, security experts have warned. A report from Kaspersky detected more than 1,600 malicious notifications between December 2022 and February 2023 as cybercriminals targeted businesses in Austria, France, India, Italy, Japan, the Netherlands, Russia, Singapore, South Korea, Spain, and the US. However, despite the misleading email notifications, there are some clear signs to help businesses detect potential scam activity. SharePoint phishing scams Legitimate emails of shared files are received by companies using Microsoft 365’s online collaboration tools , with no dubious link in sight, helping emails to bypass the security filters that typically prevent users from receiving such emails. The shared OneNote file then contains another notification of a file that has been shared, this time to a file like a PDF . Read more ...