M65 Defender Pharmacy Targeted Phishing / Spam

We got M365 Defender for email security, and there is a user who is getting about 10,000+ targeted phishing / spam messages a month all centered around "Pharmacy" or "EDpills" with malicous links in the body.

The attacker constantly rotates the sender domain, username, and the content of the emails so microsoft constantly treats them as new phishing activity / incidents instead of treating them like a single incident. The addresses and message bodies all tend to be ED or …

cybersecurity defender pharmacy phishing spam