We've seen quite a few of these phishing kits popping up lately. Here's some insight into one called Knight Office. Analysis by Andrea Hatcher, @threatresearch @tanner and @LindseyODWelch from @huntress https://www.huntress.com/blog/inside-knight-office-m365-aitm-attack