A massive QR code phishing campaign abused Microsoft Sway, a cloud-based tool for creating online presentations, to host landing pages to trick Microsoft 365 users into handing over their credentials.

Some Windows 11 users noticed a rather odd-looking QR code on their lock screen leading to the Copilot website. After complaints, Microsoft pulled the ad, claiming it as a "way to educated users.

Attackers have a new tool that targets Microsoft 365 users at a massive scale. Security researchers say a phishing platform called Quantum Route Redirect, or QRR, is behind a growing wave of fake ...