The TOAD phishing campaign has emerged as a serious threat targeting users of Microsoft Entra. Cybercriminals send guest-invite emails that appear legitimate but actually carry fake invoices and instructions to call malicious numbers. This tactic combines cloud identity abuse with telephone-oriented attack delivery and demands immediate defensive action. How the attack works Attackers exploit the…