Connect with us

Technology

New scam sends fake Microsoft 365 login pages

Published

on

New scam sends fake Microsoft 365 login pages

NEWYou can now listen to Fox News articles!

Attackers have a new tool that targets Microsoft 365 users at a massive scale. 

Security researchers say a phishing platform called Quantum Route Redirect, or QRR, is behind a growing wave of fake login pages hosted on nearly 1,000 domains. These pages look real enough to fool many users while also slipping past some automated scanners.

QRR runs realistic email lures that mimic DocuSign requests, payment notices, voicemail alerts or QR-code prompts. Each message routes victims to a fake Microsoft 365 login page built to harvest usernames and passwords. The kit often lives on parked or compromised legitimate domains that add a false sense of safety for anyone who clicks.

Researchers tracked QRR in 90 countries. About 76% of attacks hit US users. That scale makes QRR one of the largest phishing operations active right now.

Advertisement

WINDOWS 10 USERS FACE RANSOMWARE NIGHTMARE AS MICROSOFT SUPPORT ENDS IN 2025 WORLDWIDE

Sign up for my FREE CyberGuy Report 
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Attackers use fake Microsoft security alerts to trick people into entering their Microsoft 365 passwords. (Chona Kasinger/Bloomberg via Getty Images)

A fast follow to other major Microsoft credential attacks

QRR appeared soon after Microsoft disrupted a major phishing network known as RaccoonO365. That service sold ready-made Microsoft login copies used to steal more than 5,000 sets of credentials, including accounts tied to over 20 US healthcare organizations. Subscribers paid as little as $12 a day to send thousands of phishing emails.

Microsoft’s Digital Crimes Unit later shut down 338 related websites and identified Joshua Ogundipe from Nigeria as the operator. Investigators tied him to the phishing code and a crypto wallet that earned more than $100,000. Microsoft and Health-ISAC have since filed a lawsuit in New York that accuses him of multiple cybercrime violations.

Advertisement

Other recent examples include kits like VoidProxy, Darcula, Morphing Meerkat and Tycoon2FA. QRR builds on these tools with automation, bot filtering and a dashboard that helps attackers run large campaigns fast.

What makes QRR so effective

QRR uses about 1,000 domains. Many are real sites that were parked or compromised, which helps the pages pass as legitimate. The URLs also follow a predictable pattern that can look normal to users at a glance.

The kit includes automated filtering that detects bots. It sends scanners to harmless pages and sends real people to the credential-harvesting site. Attackers can manage campaigns inside a control panel that logs traffic and activity. These features let them scale up quickly without technical skill.

Security analysts say organizations can no longer depend on URL scanning alone. Layered defenses and behavioral analysis have become essential for spotting threats that use domain rotation and automated evasion.

Microsoft was contacted by CyberGuy for comment but did not have anything to add at this time.

Advertisement

HACKERS FIND A WAY AROUND BUILT-IN WINDOWS PROTECTIONS

Why this matters for Microsoft 365 users

When attackers get your Microsoft 365 login, they can see your email, grab files and even send new phishing messages that look like they came from you. That can create a chain reaction that spreads fast. This is why the steps below all work together to block these threats before they turn into something bigger.

Steps to stay safe from QRR and other Microsoft 365 phishing attacks

Use these simple actions to shrink the risk from fake Microsoft 365 pages and look-alike emails.

1) Check the sender before you click

Take a second to look at who the email is really from. A slight misspelling, an unexpected attachment or wording that feels off is a big clue the message may be fake. 

2) Hover over links first

Before you open any link, hover your mouse over it to preview the URL. If it does not lead to the official Microsoft login page or looks odd in any way, skip it.

Advertisement

3) Turn on multifactor authentication (MFA)

MFA adds an extra layer adds an extra layer that makes it much harder for attackers to break in even if they have your password. Use options like app-based codes or hardware keys so phishing kits cannot bypass them.

4) Use a data removal service

Attackers often gather personal details from data broker sites to craft convincing phishing emails. A trusted data removal service scrubs your information from these sites, which cuts down on targeted scams and makes it harder for criminals to tailor fake Microsoft alerts that look real.

While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

QRR hides its phishing pages across nearly 1,000 domains, making the fake login screens look convincing at first glance. (Microsoft)

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Advertisement

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

5) Update your browser and apps

Keep everything on your device up to date. Updates seal off security holes that attackers often rely on when building phishing kits like QRR.

6) Never click unknown links and use strong antivirus software

If you need to visit a sensitive site, type the address into your browser instead of tapping a link. Strong antivirus tools also help by warning you about fake websites and blocking scripts that phishing kits use to steal login details.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

Advertisement

MICROSOFT SOUNDS ALARM AS HACKERS TURN TEAMS PLATFORM INTO ‘REAL-WORLD DANGERS’ FOR USERS

7) Use advanced spam filtering

Most email providers offer stronger filtering settings that block risky messages before they reach you. Turn on the highest level your account allows to keep more fake Microsoft alerts out of your inbox.

8) Watch for login alerts

Turn on Microsoft account sign-in notifications so you get an alert anytime someone tries to access your account. To do this, sign in to your Microsoft account online, open Security, choose Advanced security options and switch on Sign-in alerts for any suspicious activity.

Strong sign-in alerts and phishing-resistant MFA help block these scams before criminals can take over your account.  (Drew Angerer/Getty Images)

Kurt’s key takeaways

QRR is a reminder of how quickly scammers change their tactics. Tools like this make it easy for criminals to send huge waves of fake Microsoft emails that look real at first glance. The good news is that a few smart habits can put you a step ahead. When you add stronger sign-in protection, turn on alerts and stay aware of the newest tricks, you make it much harder for attackers to sneak in.

Advertisement

Do you think most people can tell the difference between a real Microsoft login page and a fake one, or have phishing kits become too convincing? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report 
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Copyright 2025 CyberGuy.com.  All rights reserved.  

Advertisement

Technology

Crimson Desert dev apologizes for use of AI art

Published

on

Crimson Desert dev apologizes for use of AI art

Reviews of Crimson Desert have been mixed, but the bigger issue for the game has been the discovery of what appeared to be AI-generated assets in the final release. Now the developer has acknowledged that AI art was indeed used during the game’s creation, but says that it was intended to be replaced before release. In a statement on X, the company said it was conducting a “comprehensive audit” to identify and replace any AI-generated content.

The company apologized for both its inclusion in the final release and for not being more transparent about its use during development. “We should have clearly disclosed our use of AI,” it said.

The use of generative AI in gaming has become a hot-button issue of the last couple of years as it’s made its way into several high-profile titles. While some large studios have embraced it, many smaller developers have revolted against the trend, proudly proclaiming their games to be “AI free.”

Continue Reading

Technology

YouTube job scam text: How to spot it fast

Published

on

YouTube job scam text: How to spot it fast

NEWYou can now listen to Fox News articles!

Most of us have received a random text that makes us pause for a second. Maybe it promises a prize. Maybe it claims to be from a delivery company. Lately, another type of message is spreading quickly: the remote job scam.

That is exactly what happened to Peter from New York. He wrote in after receiving a suspicious message about a high-paying YouTube job.

Here is what he sent:

“I received this text today, and I think it’s a scam. How can I tell for sure, and what do I do next?”

Advertisement

Below is the message Peter received. At first glance, it looks like a job opportunity. However, when you break it down line by line, several warning signs appear. Let’s walk through them.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

FAKE GOOGLE SECURITY PAGE CAN TURN YOUR BROWSER INTO A SPYING TOOL

A suspicious text message promises up to $10,000 a month for boosting YouTube video views. Offers like this are a common sign of a job scam.  (Kurt “CyberGuy” Knutsson)

Advertisement

Red flag 1: A random job offer from a stranger

The text comes from an unknown international phone number starting with +63, which is the country code for the Philippines. Legitimate companies rarely recruit through random text messages from unknown numbers. Real employers usually contact candidates through job platforms, email or professional networks like LinkedIn. When a job appears out of nowhere and promises high pay, it should immediately raise suspicion.

Red flag 2: The pay is wildly unrealistic

The message claims:

  • $200 to $600 per day
  • $10,000 or more per month

Those numbers are a major warning sign. Entry-level remote work, such as “boosting video views” or “YouTube optimization,” does not pay anywhere near that range. Scammers often use unusually high pay to trigger excitement and urgency. When money sounds too good to be true, it usually is.

Red flag 3: No experience required but huge income

The text says “no experience required, free paid training provided.” Scammers often combine high income with zero qualifications. That combination is designed to attract as many people as possible.

Real digital marketing jobs usually require:

  • SEO or marketing experience
  • Analytics knowledge
  • Platform expertise

A company offering $10K per month with no requirements is not realistic.

BE AWARE OF EXTORTION SCAM EMAILS CLAIMING YOUR DATA IS STOLEN

Advertisement

Scammers often claim no experience is required and that training is provided. The goal is to lure you in quickly before you start asking questions.  (Kurt “CyberGuy” Knutsson)

Red flag 4: The job description is vague

The text claims the job is to “increase video exposure and view count.”

That description is extremely vague. It does not explain:

  • What tools you would use
  • What company you would work for
  • How the work is measured

Scam job offers often stay vague so they can adapt the story later.

Red flag 5: Pressure to respond immediately

The message says: “5 urgent openings available, first come first served.” This is a classic scam tactic. Urgency pushes people to respond quickly before they have time to research the offer. Real companies rarely hire qualified candidates on a first-come basis through text messages.

Red flag 6: The strange reply instructions

The message tells recipients to reply “OK” and then send a numeric code. This step is often used to move the conversation to another messaging platform, such as Telegram or WhatsApp, where scammers continue the scheme. Once the conversation moves there, victims may be asked to:

Advertisement
  • Complete fake tasks
  • Send cryptocurrency
  • Pay deposits for “training”

These scams are often called task scams, where victims complete simple online tasks and may even receive small payments at first before scammers demand larger deposits for payouts that never come. They have exploded worldwide over the past few years.

Red flag 7: No company information

The message never names a real company. It mentions a “manager” named Goldie but provides:

  • No company website
  • No corporate email
  • No office address

Legitimate employers want applicants to know who they are. Scammers avoid details that can be verified.

How these YouTube job scams usually work

Many of these scams follow the same pattern. First, scammers promise easy money for simple tasks lsuch as liking videos or boosting views. At the beginning, they may even send a small payment to build trust. Then things change. Victims are asked to deposit money to unlock larger payouts or complete “premium tasks.” Once payments are sent, the scammers disappear. The Federal Trade Commission says Americans lost hundreds of millions of dollars to job scams in recent years, and text message recruitment scams are rising fast.

 Google warns about growing job scams and how to verify recruiters

We reached out to Google, and a spokesperson provided the following statement to CyberGuy:

“Google is aware of these job scams happening across the industry and believes they’re growing around the world. We strongly encourage any candidate, or individual receiving them, to exercise caution and report it to the platform you received it on as a phishing attempt and/or spam. Our recruiting team focuses on contacting candidates in official capacities and are very clear about who we are, why we’re reaching out, and do so from legitimate emails or profiles on job sites. Jobseekers should verify anyone contacting them by email addresses, looking up the person online, such as on LinkedIn, and if something does seem suspicious, flag it to the outlet where it was received. Folks can also vet and report these scams to Google at support.google.com. Our Google careers page reflects all of our current job postings, so candidates should check offers against those. Generally speaking, Google also continues to offer a range of tools and insights that help people automatically spot and avoid scams like these whether they receive them via email, search results, text messages, etc.”

Advertisement

FAKE GOOGLE GEMINI AI PUSHES ‘GOOGLE COIN’ CRYPTO SCAM

Messages that push you to reply immediately or move the conversation to apps like Telegram or WhatsApp are a major red flag.  (Kurt “CyberGuy” Knutsson)

Ways to stay safe from job text scams

If you receive a message like Peter’s, here are some smart steps to take.

1) Never respond to unknown job texts

Replying confirms your number is active. That can lead to more scam messages.

2) Do not click links or download attachments

Scam texts sometimes include links that lead to phishing pages designed to steal login credentials or financial information. Install strong antivirus software on your devices, which can help detect malicious links, block dangerous websites and warn you before you open something risky. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

Advertisement

3) Reduce how easily scammers can find your information

Scammers often harvest phone numbers and personal details from data broker sites and public profiles. Using a data removal service to remove your information from these sites can make it harder for criminals to target you with job scams and other fraud. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

4) Research the company independently

Search for the company name online. Look for an official website, verified social media or job listings.

5) Avoid jobs that ask for money

Legitimate employers never require deposits for training, equipment or task access.

6) Block and report the number

You can report scam texts directly from your phone.

On iPhone:

Advertisement

Open the message, tap the phone number at the top of the screen, scroll down and select Block Contact. You can also tap Report Spam under the message. If the option appears, then click Delete and Report Spam, which sends the report to Apple and deletes the message.

On Samsung Galaxy phones:

Steps may vary slightly depending on your Samsung model and software version.

Open the Messages app and select the conversation. Tap the three-dot menu in the upper right corner, then tap Block and report spam, then confirm by tapping Yes. This blocks the number and helps Samsung identify and filter future scam messages.

7) Report it to the FTC

In the United States, you can report scams at reportfraud.ftc.gov. Reports help investigators track large scam networks.

Advertisement

So what should Peter do next?

The safest move is simple. Peter should not reply to the message. Instead, he should block the number and report it as spam. If he has already responded, he should stop communicating immediately and avoid clicking any links or sending money. If he shared personal information such as his phone number, email address or financial details, it may also be wise to monitor his accounts closely and consider signing up for an identity theft protection service. The good news is that spotting the red flags early can prevent a much bigger problem later. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com.

Kurt’s key takeaways 

Scammers constantly adapt their tactics. Today, it might be a fake delivery notice. Tomorrow, it might be a high-paying remote job. The message Peter received hits many of the classic warning signs: unrealistic pay, vague job duties, urgent language and a request to reply quickly. When a stranger promises easy money through a random text message, pause for a moment. That short pause can save you a lot of trouble.

Now I am curious. If a text suddenly promised you $10,000 a month for simple online tasks, would you recognize the warning signs before replying? Let us know by writing to us at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report 

Advertisement

Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter. 

Copyright 2026 CyberGuy.com.  All rights reserved.

Advertisement
Continue Reading

Technology

Halide co-founder is suing former partner Sebastiaan de With for taking source code to Apple

Published

on

Halide co-founder is suing former partner Sebastiaan de With for taking source code to Apple

Lux Optics co-founder Sebastiaan de With made headlines when he joined Apple in late January. The company was behind Halide, one of the most popular photography apps for the iPhone, which gained a cult following for its robust pro-level controls.

Apple was apparently a big enough fan that it tried to acquire the developer last summer. Those talks never bore fruit, and eventually the company simply hired de With. At the time, it was widely believed that Apple had poached him from Lux. But new allegations from a lawsuit filed by co-founder Ben Sandofsky in the California Superior Court of Santa Cruz claim de With was fired for financial misconduct in December of 2025.

According to The Information, the suit “accuses de With of improperly using more than $150,000 in Lux corporate funds to pay for personal expenses,” as well as “taking Lux source code and confidential material with him when he joined Apple.”

An attorney for de With denied those claims and said that “The attempt to insert Apple into this dispute appears designed to create leverage and attract attention.“

Continue Reading

Trending