Microsoft 365 phishing attacks use encrypted RPMSG messages

Attackers are now using encrypted RPMSG attachments sent via compromised Microsoft 365 accounts to steal Microsoft credentials in targeted phishing attacks designed to evade detection by email security gateways. [...]

accounts attachments attackers attacks compromised credentials detection email email security encrypted evade messages microsoft microsoft 365 phishing phishing attacks rpmsg security steal