A sophisticated phishing campaign has exploited Microsoft SharePoint to target multiple energy firms, bypassing traditional security measures. By leveraging trusted file-sharing workflows, attackers successfully compromised corporate accounts and launched large-scale business email compromise operations across the sector.