Microsoft phishing scams use fake security alerts and links that redirect to credential-stealing pages with warning signs, including urgent language and unusual senders.

Microsoft is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese hackers to ...