Hackers are calling employees pretending to be the boss to steal Microsoft 365 data
A new cybercrime group called Helix is tricking employees into handing over access to Microsoft 365 with fake phone calls from someone posing as their boss. According to ReliaQuest, the attackers then use legitimate Microsoft services to quietly steal SharePoint data, making the attacks much harder to detect than traditional malware.