스캐머들이 마이크로소프트 내부 계정을 악용해 스팸 링크 발송중

The abuse of official Microsoft domains for phishing undermines the 'verify the sender' security principle, making it nearly impossible for average users to distinguish legitimate alerts from scams. This incident underscores a critical failure in automated notification systems and domain governance, demanding more rigorous verification of account-creation workflows by major tech providers.