Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks

Check Point Research observed a widespread rise in brand-impersonation phishing in Q3 2026 (Microsoft most targeted at 33%), with attackers using emails and spoofed websites to harvest credentials and payment data, deliver scripts that execute remote code (e.g., a fake Google Antigravity page), and distribute a FleetDeck installer via spoofed DocuSign pages to gain device access.