Missile Alert Phishing Exploits Iran-US-Israel Conflict for Microsoft Logins

Researchers at Cofense observed a mass phishing campaign impersonating a Ministry of Interior/civil defence, sending urgent missile-alert themed emails that instruct recipients to scan a QR code. The QR code redirects users through a fake human-check to a cloned Microsoft login page designed to capture credentials; the report highlights the spoofed sender address and hosting domain and warns against entering passwords into sites reached via unexpected QR codes.