https://hackingpassion.com/tags/business-email-compromise/Recent content in Business-Email-Compromise on HackingPassion.com : root@HackingPassion.com-[~]HugoenFri, 17 Apr 2026 13:11:20 +0200https://hackingpassion.com/microsoft-365-mailbox-rules-attack/Fri, 17 Apr 2026 13:11:20 +0200https://hackingpassion.com/microsoft-365-mailbox-rules-attack/<p>Microsoft 365 mailbox rules are being weaponized as a core technique behind <strong>$2.77 billion in annual Business Email Compromise losses</strong>, and attackers are creating hidden rules that survive password resets, MFA enrollment, and session invalidation. A new Proofpoint report reveals that <strong>10% of all compromised Microsoft 365 accounts get malicious inbox rules installed within seconds of the initial breach</strong>, targeting 400+ million users worldwide by abusing built-in email functionality no security tool will ever flag as suspicious. 😏</p>