From PDF Invoice Lure to Microsoft 365 AiTM: Inside a Multi-Redirect Phishing Chain

A sophisticated phishing campaign uses synthetic business personas, PDF lures, and a multi-stage redirect chain through reputable services to deliver a convincing Microsoft 365 adversary-in-the-middle attack, enabling real-time session hijacking and bypassing traditional email and link security controls.