Nikkei: Microsoft 365 account taken over and used for phishing emails

A third party logged into a Nikkei employee's Microsoft 365 account, and on 30 September about 9,000 spoofed emails leading to a malicious site were sent to colleagues, news sources and others. Recipients' email addresses and names, and the content of some emails, are believed to have leaked. An employee of Nikkei BP had their credentials phished through one of these emails and their mail account was accessed, which may have leaked names and emails of 26 contacts.