Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials

Ocean Security has found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links to steal Microsoft 365 credentials, Hackread reports. Because the messages arrive through a legitimate service’s notifications, they can appear trustworthy to recipients.