Phishing Attacks on Microsoft 365 Increase

On September 13, 2026, Microsoft warned of an increase in phishing attacks focused on passkeys and single sign-on (SSO). These attacks are carried out by threat actors associated with groups such as ShinyHunters and Helix. The aim of these attacks is to compromise corporate accounts and steal data from Microsoft 365 services. The attackers employ social engineering techniques to deceive their victims.

They often impersonate trusted sources and attempt to trick users into revealing their login credentials. Microsoft has noted that these tactics are particularly effective, as many companies rely on passkeys and SSO to simplify access to their systems. A central element of these attacks is the use of fake login pages that closely resemble the genuine Microsoft login pages. Users who are directed to these pages may unknowingly enter their credentials, which are then captured by the attackers. Microsoft recommends being particularly cautious when entering login credentials and checking the URL of the website.

In addition to phishing attacks, Microsoft has also received reports of ransomware attacks targeting the same audiences. These attacks can lead to significant data loss and financial damage. Companies are therefore urged to strengthen their security measures and conduct employee training to recognize phishing attempts. Microsoft has already taken steps to enhance the security of its services, including improved authentication protocols and the introduction of additional security features.

Companies using Microsoft 365 are encouraged to implement these new features to better protect their data. The threat of phishing and ransomware is not new, but it has increased in recent months. According to a recent study, 45% of companies have fallen victim to phishing attacks in the last six months. This figure underscores the urgency with which companies need to rethink their security strategies. Microsoft has also pointed out that attackers are constantly adjusting their tactics to circumvent security measures.

Therefore, it is crucial for companies to regularly review and adjust their security protocols. Implementing multi-factor authentication (MFA) is considered one of the most effective methods to prevent unauthorized access. The security landscape is complicated by the increasing complexity of IT infrastructure in many companies. Many organizations utilize a variety of cloud services, which expands the attack surface. Microsoft recommends developing a comprehensive security strategy that covers all aspects of IT security. The threat of phishing and ransomware is expected to continue rising as attackers develop increasingly sophisticated methods. Microsoft plans to roll out new security updates for all users by the end of 2026 to enhance resilience against such attacks.