Kaspersky blocked over 31,000 fraudulent emails exploiting Microsoft's authentication system between August 1 and September 18, 2026. |Attackers are abusing Microsoft Entra and official notifications to redirect victims to malicious sites and disguise phishing messages. |Users are advised to be wary of suspicious links, not to share verification codes, and to use anti-phishing protection.
In just seven weeks, over 31,000 phishing emails were detected that exploited Microsoft's authentication system to attack users. The methods were very different from traditional scams.