Scammer abuses Microsoft internal accounts to send spam links

A Microsoft internal account was reportedly abused to send spam emails that impersonated official Microsoft notifications.

The messages included links to fraudulent sites, raising phishing and credential theft risks.

Because the emails came from a legitimate-looking Microsoft address, users may be more likely to trust them.

The incident highlights the need for stronger email impersonation defenses and careful link verification.