Microsoft Detects 7.6 Billion Email Phishing Threats as Teams Vishing Attacks Increases 10-Fold

Microsoft observed a large-scale surge in credential-phishing and vishing during Q2 2026 — roughly 7.6 billion email-based phishing threats — with attackers leveraging fake sign-in pages, malicious attachments (HTML/PDF/EML), QR-lures, and Microsoft Teams calls to steal credentials and deliver malware. The report includes IoCs (domains, email addresses, download URLs, and file hashes), describes automated BEC campaigns and Teams support-impersonation vishing, and recommends technical controls, phishing-resistant MFA, and user training.