Microsoft: "8.3 billion email phishing attempts in Q1... QR code attacks surge 146%"

Microsoft said it blocked about 8.3 billion email phishing attempts in Q1 2026, showing the scale of ongoing credential-theft campaigns.

Most attacks were link-based, while QR-code phishing rose 146% and CAPTCHA-based lures also climbed sharply.

Business email compromise reached 10.7 million cases, and Microsoft warned that phishing tactics are evolving quickly across channels.

Tycoon2FA-related email attacks fell about 15% after law-enforcement action, but the disruption appears temporary.