Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries

Microsoft disclosed a large-scale credential theft campaign targeting over 35,000 users across 26 countries. The campaign used code of conduct-themed lures and legitimate email services to steal authentication tokens. It affected more than 13,000 organizations between April 14 and 16, 2026.