Home / Technology / New Attack Targets Microsoft 365 Users Via Fake Logins
New Attack Targets Microsoft 365 Users Via Fake Logins
27 Nov, 2025
Summary
- Attackers use QRR platform to create fake Microsoft 365 login pages.
- QRR targets users globally, with 76% of attacks hitting US users.
- New tactics bypass automated scanners, requiring layered defenses.
A sophisticated phishing platform, Quantum Route Redirect (QRR), is actively targeting Microsoft 365 users by deploying convincing fake login pages. These pages are hosted on approximately 1,000 domains, often leveraging parked or compromised legitimate websites to appear trustworthy and bypass security scanners.
QRR's methods mimic legitimate requests such as DocuSign notifications or voicemail alerts, guiding victims to credential-harvesting sites. The platform's advanced features, including bot filtering and an attack dashboard, enable rapid scaling of campaigns without requiring extensive technical expertise from attackers.
Security experts emphasize the need for layered defenses beyond simple URL scanning, as QRR demonstrates the evolving tactics used by cybercriminals. Users are advised to adopt multi-factor authentication, verify sender details, and keep software updated to mitigate these pervasive threats.
