Top News

Microsoft has revealed details of a large global phishing attack that targeted more than 35,000 users across over 13,000 organisations. Most of the victims were based in the United States, but the campaign affected companies in 26 countries

Microsoft has revealed details of a large global phishing attack that targeted more than 35,000 users across over 13,000 organisations. Most of the victims were based in the United States, but the campaign affected companies in 26 countries.

The attack took place between April 14 and April 16, 2026, and used highly convincing emails to trick people into giving access to their accounts.

These emails were designed to look like official internal messages related to workplace rules or “code of conduct” reviews.

According to Microsoft, the attackers used polished email templates that looked professional and trustworthy. The messages created urgency by claiming that users needed to review important compliance issues immediately.