CAPTCHA Bypass and ClickFix Lures Drive Surge In Credential Theft Attacks
ID: 675c6364-cec7-50ed-9b69-8199cae4d718
STIX ID: report--675c6364-cec7-50ed-9b69-8199cae4d718
Feed Name: Cyber Press
Threat Score
Microsoft's Q1 2026 telemetry shows massive email phishing (≈8.3 billion messages) with attackers increasingly using link-based delivery, QR-code lures, CAPTCHA-bypasses and ClickFix-style social engineering to steal credentials and deliver info-stealers; CAPTCHA-gated attacks surged to 11.9 million in March, Tycoon2FA disruptions temporarily reduced activity but tactics spread beyond that platform, and business email compromise remained widespread (~10.7 million attacks).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.