We look after the IT Support services for a client that has had a phishing breach.
A support ticket was created to report a issue with their Microsoft 365 Email.
We looking into this to discover a phishing attack email.
This email shows a shared file and when opened it brings up a Office 365 login page .
This is where your username / password is retained by the phisher.
Be vigilant and careful with these types of email.