That voicemail message could be a Microsoft 365 phishing scam

Crooks are trying to steal Microsoft 365 login credentials from people working in U.S. military, security software, manufacturing supply chain, healthcare, and pharma firms, with an elaborate phishing campaign that uses fake voicemail, and fake Microsoft login pages.

Employees in these firms have been getting fake email notifications, in which it says that someone from their organization sent them a voicemail. 

The email itself looks as if it’s coming from…