QR code phishing surges 146% as Microsoft detects and analyzes 8.3 billion phishing threats in Q1 2026 – attackers are changing tactics to bypass security

A hand holding a mobile phone scans a QR code on a blurry laptop screen. The phone issues a warning that the QR code could be malicious.

• Microsoft detected 8.3 billion phishing emails in Q1 2026
• Attackers are favoring QR-code based attacks
• PhaaS group Tycoon2FA saw a drop in attacks following disruption, but is rehosting infrastructure elsewhere

Microsoft has warned of a 146% rise in QR code phishing (quishing) as attackers change tactics to get through defenses.