BEC attack techniques exploit Microsoft 365 messages
Building 92 at Microsoft's headquarters in Redmond, Washington. (Coolcaesar via CC BY-SA 4.0)(Coolcaesar via CC BY-SA 4.0) Researchers have discovered two business email compromise (BEC) attack techniques that exploit Microsoft 365 âread receiptâ and âout of officeâ message loopholes to evade auto-remediation of a malicious email. In a blog posted Tuesday, Abnormal Security reported that in using these techniques, scammers target victims with BEC extortion notes by redirecting their own Microsoft 365 âout of officeâ replies and âread receiptsâ back t...