Microsoft 365 cloud accounts are the latest marks of a spear phishing campaign that targeted state employees in New Jersey with the intention of delivering malware, stealing money or obtaining user credentials, according to state cybersecurity officials.

The cybercriminals used language tailored to convince users to click the link included in the phishing email, the New Jersey Cybersecurity and Communications Integration Cell reported in its April 22 cyber threat highlight.