The loophole allows spammers and scammers to send emails from a legitimate Microsoft email address typically used for sending genuine account alerts.
TE
Source
This article was originally published by TechCrunch and written by Zack Whittaker.
Read original article on TechCrunch