National Cyber Directorate warns of Microsoft-themed phishing wave

Israel’s National Cyber Directorate issued an urgent warning on Sunday about a new phishing campaign impersonating Microsoft Teams and Power BI. The attackers are sending fake links that appear to offer access to documents, but actually lead to spoofed websites designed to steal login details and take over personal and corporate accounts.

According to the warning, the fraudulent messages direct users to an external site that looks like an official sign-in page. There, victims are asked to enter an authentication code or approve a login attempt. The directorate said the messages may look credible because they use familiar Microsoft services that many people encounter at work.

The public was told not to click such links and not to approve logins they did not initiate. If someone receives an unexpected request to share a document, the guidance is to verify the sender through a separate channel, such as a phone call or an internal company message.

The directorate said early caution can prevent serious damage to company information systems and the leakage of sensitive personal data. Anyone who suspects an attack, or who has already interacted with a suspicious site, should report it immediately to hotline 119. The hotline is available by phone, on the internet, and via WhatsApp, and rapid reporting helps the agency build an updated picture of the campaign and stop it from spreading.