Shit's getting wild.. Just had an AI bot call the helpdesk impersonating an employee asking to "reset my MFA". Sounded just like him-- the only huge giveaway is that the guy in question is a total retard and would never call asking to "reset MFA", and probably doesn't even know what MFA stands for. It would have been more of a "your security crap locked me out" or " the number thingie isn't working on my phone". They need to give these bots more downs.
Oh, and the QR code phishing Microsoft is hopeless at stopping is great too. If anybody is looking to turf O365 for spam management but doesn't want a fucking mail gateway, Perception point X-ray via API integration has been amazeballs.