While it’s easy to blame cyberattacks on sophisticated hacking, the truth is that many attackers rely on social engineering — a craft of deception designed to manipulate people into giving up sensitive information or access. The scary part? It’s not just high-tech companies that get targeted, it’s all of us.

With more than 100 million monthly active subscribers, Office 365 has attracted the attention of hackers who’ve revamped an age-old trick. This time, they come up with a highly targeted, well-crafted spear-phishing scam that's even more difficult to identify.