Surge in Chain Phishing Attacks Targeting Microsoft 365 in Switzerland

The Federal Office for Cyber Security (FOCS) warns of a surge in chain phishing attacks targeting corporate Microsoft 365 accounts.


These attacks employ a snowball effect, spreading phishing emails from compromised accounts to all their contacts.

During March 2025, FOCS recorded a significant rise in such attempts. Attackers typically use fake login pages resembling Microsoft 365 notifications - such as OneDrive or SharePoint prompts - to trick users into providing credentials.

Once inside, hackers create email forwarding rules, allowing continued access to sensitive data even after password resets. A single compromised account can lead to widespread breaches, affecting employees, customers, partners, and suppliers.

FOCS provides security recommendations in its full report.

As cyber threats continue to increase in both volume and complexity at an alarming rate, causing billions of dollars in damages in the process, you can no longer afford to be reactive when it comes to cyber security. Penta’s highly tailored security solutions are designed by cybersecurity experts using state-of-the-art technologies. Contact us today.