Microsoft is warning of a significant rise in phishing attacks that spoof internal domains, making malicious emails appear to come from HR or IT. The attacks exploit misconfigured email routing and are often paired with phishing-as-a-service kits. Organizations with complex mail setups are most at r