Office 365 has around 250 million active users globally. It dominates. Unsurprisingly it’s attracting cyber attacks. But as this report from Vectra investigates, attackers focus on account takeovers rather than email compromise to gain initial access. Identity is the biggest risk. Once they’re in, the attackers move laterally across the platform, setting up rules, accessing data and sensitive information. Vectra continues its Spotlight report series with security industry research on Office 365. This report reveals the most common attack vectors, details common techniques – from using trusted communication channels to installing malware – and pinpoints vulnerable Office 365 tools.