Email threat landscape: Q2 2026 trends and insights
ID: 696d409b-58f0-5827-aacb-0c4167dd1533
STIX ID: report--696d409b-58f0-5827-aacb-0c4167dd1533
Feed Name: Microsoft Security
Date Published: 2026-07-23
Date Updated: 2026-07-23
Author: Microsoft Threat Intelligence and Microsoft Defender Security Research Team
**Executive summary:** Microsoft Threat Intelligence reports that Q2 2026 saw a sharp decline in Tycoon2FA-linked phishing after disruption operations, but overall phishing remained widespread (≈7.6 billion email threats in Q2) with evolving tactics—QR-code and CAPTCHA-gated attacks shifted delivery formats, Teams-based vishing and social engineering rose sharply, and high-scale criminal campaigns were observed delivering credential phishing, automated BEC at scale, and a multi-stage nested-EML campaign that led to silent malware execution via a BAT dropper; the report includes IOCs, detections, and mitigation recommendations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.