Hackers Favor US Eastern Business Hours in M365 Phishing Campaign

As cited

Copy frozen at 2026-09-11 16:58 UTC (site build).

threat intel

Hackers Favor US Eastern Business Hours in M365 Phishing Campaign

KnowBe4 researchers identified a phishing campaign that exploits Microsoft 365's Direct Send feature to deliver malicious emails, with attackers timing campaigns to align with US Eastern business hours.

Why it matters: Organizations using Microsoft 365 are targeted; practitioners should review Direct Send policies and email security controls to block unauthorized sending paths.

Source published

2026-09-11 13:30 UTC

First seen by Cybersecurity Tracker

2026-09-11 16:36 UTC