Office 365 Phishing Attack Leverages Real-Time Active Directory Validation September 11, 2020 by Lindsey O'Donnell Lindsey O'Donnell No comments yet Attackers check the victims' Office 365 credentials in real time as they are typed into the phishing landing page, by using authentication APIs. Post navigation Liveblog: All the news from Apple’s “Time Flies” event—Tuesday, 9/15, at 1pm ETAPT28 Mounts Rapid, Large-Scale Theft of Office 365 Logins