Microsoft has disclosed details of a large-scale credential
theft campaign that has leveraged a combination of code of
conduct-themed lures and legitimate email services to direct users
to attacker-controlled domains and steal authentication tokens. The
multi-stage campaign, observed between April 14 and 16, 2026,
targeted more than 35,000 users across over 13,000 organizations in
26 countries,
Read more https://thehackernews.com/2026/05/microsoft-details-phishing-campaign.html

