Email threat landscape: Q3 2026 trends and insights

Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026, covering July to September, even as QR code phishing declined and CAPTCHA-gated phishing recovered. The report also notes malicious messages spoofing familiar business-service sender domains, which exposed risks associated with security overrides.