Microsoft Reports Cyberattacks on Targeted Email Accounts

The Microsoft Threat Intelligence Center (MSTIC) has released a blog post
describing an increase in malicious cyber activity from the Iranian group known
as Phosphorus. These threat actors are exploiting password reset or account
recovery features to take control of targeted email accounts.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users
to review the Microsoft
blog for additional information and recommendations and CISA’s Tip on Supplementing
Passwords.