Scammers are abusing an internal Microsoft account to send spam links

Scammers are reportedly abusing a Microsoft-managed internal account and related email infrastructure to send spam-like links.

The case highlights weaknesses in controls over message content and sender identity, even inside trusted corporate systems.

Commenters said similar suspicious activity has been seen from other major brands, including PayPal.

The incident shows how trusted domains can be exploited to make phishing and fraud look legitimate.