Quantum Route Redirect PhaaS targets Microsoft 365 users worldwide

A phishing-as-a-service platform named Quantum Route Redirect (QRR) is actively used to harvest Microsoft 365 credentials by leveraging roughly 1,000 parked or compromised domains worldwide (notably 76% of observed attacks against U.S. users); the kit automates rerouting, distinguishes human from bot traffic to evade scanners, provides operator dashboards, and follows a consistent URL pattern for credential-harvesting pages, with recommendations to use robust URL filtering and account monitoring to mitigate risk.