A massive QR code phishing campaign abused Microsoft Sway, a cloud-based tool for creating online presentations, to host landing pages to trick Microsoft 365 users into handing over their credentials.
Microsoft detected 8.3 billion phishing emails in Q1 2026 Attackers are favoring QR-code based attacks PhaaS group Tycoon2FA saw a drop in attacks following disruption, but is rehosting infrastructure ...
Some Windows 11 users noticed a rather odd-looking QR code on their lock screen leading to the Copilot website. After complaints, Microsoft pulled the ad, claiming it as a "way to educated users." ...