Harvesting Office Microsoft 365 credentials is now the most profitable activity for cybercriminals. That’s why, in Q4, Microsoft was the most impersonated brand, with 2.3x more attacks than #2 Netflix. While credential phishing is a serious enough threat, it’s just the beginning. Hackers are increasingly using compromised legitimate Office 365 accounts to launch even more damaging spear phishing attacks.