**BREAKING NEWS: FBI ISSUES NATIONWIDE ALERT ON MICROSOFT OUTLOOK AND ONEDRIVE CYBER THREATS**
**WASHINGTON, D.C. (February 26, 2025) – 11:00 AM EST** – The Federal Bureau of Investigation (FBI) has issued a formal, high-priority alert to the American public and private sector regarding a significant and sophisticated cyber threat specifically targeting Microsoft Outlook and OneDrive applications.
**What:** The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have confirmed a coordinated cyber-espionage campaign exploiting vulnerabilities within Microsoft's ecosystem. The primary attack vector involves malicious phishing emails delivered via Microsoft Outlook. Once a user interacts with these links or attachments, the threat actors gain unauthorized access to the victim's Microsoft 365 account. The attack then leverages the victim's account to propagate malicious files stored on OneDrive, targeting internal contacts.
**Who:** The alert has been disseminated to Chief Information Security Officers (CISOs) and IT departments across government agencies, critical infrastructure sectors, private corporations, and small businesses nationwide. The FBI has attributed the campaign to a sophisticated threat actor with suspected ties to a foreign state, though a specific nation-state has not been named.
**When:** The agency reports that the intensity and success rate of these attacks have escalated dramatically over the past 72 hours, prompting the urgent public warning. The FBI expects the campaign to continue and evolve.
**Where:** The cyber threat is active across all 50 states and U.S. territories. The attacks are not geographically isolated, indicating a widespread, internet-based exploitation affecting any organization or individual using Microsoft Outlook and OneDrive for business or personal communications.
**Why:** The FBI assesses that the primary objectives of this operation are data theft, reconnaissance, and establishing persistent network access for future disruption or surveillance. The use of legitimate Microsoft services like Outlook and OneDrive makes detection extremely difficult, as the malicious traffic mimics standard user behavior