The ARToken phishing operation targets Microsoft 365 accounts via sophisticated business email compromise (BEC), using tailored invoice-themed emails impersonating known vendors to trick accounts-pable staff. The article does not provide a CVSS score, specific affected or fixed software versions, or a technical workaround.
Accounts-payable staff at U.S. companies keep receiving invoice emails that look like they come from vendors they already work with. One landed at a life-sciences company in April 2026, addressed to the person who handles payments and written in the voice of a Wisconsin contractor’s billing contact. It asked about invoices that appeared to still be outstanding, the sort of note an accounts-payable team handles every day. Behind it sits a phishing operation Cisco Talos … More → The post The ARToken phishing panel targets Microsoft 365 accounts appeared first on Help Net Security .