Hackers will often send spam messages that are phishing for user’s Office 365 username and password. The email may come in many forms asking you to sign into your account online. It may say your account is going to expire, it may say you have a message waiting for you, it may say there is suspicious activity on your account. It provides a link that takes you to a website that looks almost identical to the Office 365 sign in page. Below is an example going to web address hxxps://www.rsl.org.bd which is definitely not a Microsoft website.