Microsoft 365 breach led to $1.5m crypto theft at investment firm

An investment firm lost $1.5m in cryptocurrency after attackers compromised its Microsoft 365 environment, using Outlook rules to intercept and alter emails about a planned investment. The fraud surfaced only when the genuine counterparty asked when the money would be sent.

• Attackers used Microsoft 365 and Outlook rules, not the trading platform
• The firm itself authorised the $1.5m crypto transfer
• The scam emerged when the real investment company asked about the funds
• KPMG: 92% of UK asset managers rank cyber risk in their top five