We’ve been tracking a phishing campaign that has been using open redirects for months, and it continues to evolve and persist. As recently as last week, we detected a spam run that abused a different web app but utilized the same TTPs and infrastructure. pic.twitter.com/3iztzVwbKy
— Microsoft Security Intelligence (@MsftSecIntel) August 30, 2021