Widespread credential phishing campaign abuses open redirector links

Widespread credential phishing campaign using open redirector links tracked by Microsoft, combining social engineering baits, redirecting to fake sign-in page, leading to credential compromise and potential further attacks. Abuse of open redirects in email communications common among organizations. Attackers utilize wide variety of domains for sender infrastructure to evade detection, including free email domains, compromised legitimate domains, and DGA domains