**BREAKING NEWS: FBI ISSUES URGENT CYBERSECURITY ALERT FOR MICROSOFT OUTLOOK AND ONEDRIVE USERS**
**WASHINGTON, D.C. (AP)** — The Federal Bureau of Investigation (FBI) has issued a nationwide alert concerning a sophisticated phishing campaign specifically targeting users of Microsoft Outlook and OneDrive. In a statement released this morning, the agency confirmed a coordinated effort by malign actors to exploit vulnerabilities within these cloud-based platforms.
**What is happening?** The FBI warns that cybercriminals are deploying advanced social engineering tactics to bypass multi-factor authentication (MFA). The primary method involves cloning legitimate OneDrive and Outlook login pages to harvest user credentials. In some instances, the attackers are using consent phishing, prompting users to grant permissions to malicious apps under the guise of a security update.
**Where is this occurring?** The attacks are being reported across the United States in both the public and private sectors, with specific targeting of critical infrastructure, government agencies, and major corporate enterprises. The FBI’s Cyber Division confirmed the threat is both domestic and international in origin.
**When did this begin?** The FBI has observed a sharp uptick in these specifically tailored attacks over the past 48 hours, leading to the elevation of the alert to a "Critical" threat level. Analysts believe the campaign was initially seeded via email attachments sent through compromised business accounts.
**Why is this happening?** According to the Bureau’s intelligence, these actors aim to gain persistent access to enterprise networks, likely for data exfiltration, ransomware deployment, or long-term espionage. The exploitation of trust in Microsoft’s legitimate services allows the attacks to remain unnoticed by traditional security filters.
**How can users protect themselves?** The FBI recommends immediate action: do not click on unexpected password reset prompts for Outlook or OneDrive. Verify any request for application permissions directly with an organization's IT department. The agency has also released indicators of compromise (I