Office 365 accounts are targeted and compromised in takeover attacks (ATO), accounts which cybercriminals later use for a variety of nefarious purposes ranging from spear-phishing and BEC attacks to malvertising campaigns. […]
Click here for original story, Office 365 Accounts Compromised via ATO Attacks Used in BEC Scams
Source: Bleeping Computer