Watch out for another round of Microsoft Office 365 admin phishing emails regarding billing:
Your billing statement is ready for review and is attached to this email.
Our records indicate that the payment method you used to purchase Exchange Online was declined.
Your Microsoft 365 invoice is now available in the Microsoft 365 admin center.
Sincerely,
You're receiving this email because you're assigned the Global Administrator
kind regards
They are targeting the admins.
The file looks convincing, but it is just a Javascript file that sends your passwords to hackers: