The lure looked simple, but the chain behind it was not. 🖼️ Image-only email body 🧩 CSS background rendering 🎯 Large clickable visual areas 🏢 Microsoft-branded sender ☁️ Microsoft 365 tenant abuse ...