'Phishing campaigns continue to improve sophistication and refinement': Microsoft flags major 'sophisticated' phishing campaign targeting 35,000 users across 26 countries

A zoomed-in picture of a computer screen displaying a login window with a password typed in.

• Microsoft says a large phishing wave targeted over 35,000 users across 13,000 companies, mostly in the US
• Polished enterprise‑style emails with urgent prompts were used to bypass security checks
• Victims were funneled through PDFs and CAPTCHAs to harvest Microsoft credentials in real time

Microsoft has warned about a large-scale phishing email campaign against primarily US-based organizations.