New data from Microsoft’s threat intelligence team shows that email phishing attacks are accelerating worldwide as attackers adopt increasingly stealthy techniques to evade detection. These trends present growing risks for Irish organisations and their employees, many of whom remain under-prepared as tactics rapidly evolve.
The key findings include:
8.3 billion – Microsoft detected 8.3 billion email-based phishing attempts globally in Q1 2026, reinforcing email as a primary entry point for cyberattacks.

QR code phishing is up by 146%
– QR code-based phishing attacks surged by 146% over Q1?2026. Attackers embedded QR images in PDF attachments, accounting for 70% of QR phishing by March, to slip malicious links past traditional email filters.

Fake CAPTCHA scams were up by 125%
– March 2026 saw a 125% jump in phishing emails gating malicious links behind fake “verify you’re human” CAPTCHA pages – nearly 11.9?million attacks that month, as criminals add fake security checks to trick users and bypass detection.
Credential theft – The vast majority of these email attacks (90%) aimed to steal user credentials rather than deliver malware, reflecting a shift by threat actors towards account compromise over payload-based attacks.

Phishing service disrupted
– In early March, Microsoft’s Digital Crimes Unit disrupted the “Tycoon2FA” phishing-as-a-service platform, leading to an immediate 15% drop in that operation’s phishing activity for the rest of the month.

These global trends have clear implications for Ireland. Recent figures from Banking & Payments Federation Ireland’s FraudSMART programme show Irish SMEs lost nearly €19?million to email scams over the past two years, while more than half of those businesses had no dedicated fraud-awareness training for staff, highlighting a local preparedness gap as phishing tactics become more deceptive.

Kieran McCorry, national technology officer at Microsoft Ireland said: “As new tactics like QR-code scams and fake CAPTCHAs surge, it’s a wake-up call for organisations in Ireland to step up vigilance. Attackers are constantly refining their methods to trick even experienced employees, so questioning unexpected emails and having robust processes are essential now to protect credentials.”
On a related note, CyberGym, the large-scale AI security benchmark backed by UC Berkeley’s Center for Responsible, Decentralised Intelligence, just announced that Microsoft’s MDASH now tops the industry leaderboard, surpassingMythos. What’s most notable is the approach. MDASH is the first multi-model service CyberGym has included in the benchmark, and it now ranks at the top, ahead of single-model systems. You can read more about it here.
See more stories here.
Ronan Leonard

Recent Posts

Think before you tap: beware card payment overcharging scams

Consumers need to take extra care when making card payments, following an increase in reports…

1 hour ago

Cross Border Commuting Increases for Ireland and Northern Ireland

The labour markets in Ireland and Northern Ireland show strong alignment across several areas including…

2 hours ago

New Irish Offshore Wind Energy Programme to counter volatile fossil fuel prices and supply disruptions

Minister O’Brien launches Offshore Wind Energy Programme Report outlining advancement in offshore energy delivery Minister…

4 hours ago

Dublin Students Explore Active Travel and Air Quality Through The Sensor Inspector

Academy of the Near Future and Dublin City Council’s Active Travel Programme Office showcase primary…

5 hours ago

Launch of the 52nd Business & Finance Awards in association with KPMG

Business & Finance launched 52nd annual Business & Finance Awards, in association with KPMG. The…

21 hours ago

More about Irish Tech News


Irish Tech News are Ireland’s No. 1 Online Tech Publication and often Ireland’s No.1 Tech Podcast too.


You can find hundreds of fantastic previous episodes and subscribe using whatever platform you like via our Anchor.fm page here: https://anchor.fm/irish-tech-news


If you’d like to be featured in an upcoming Podcast email us at Simon@IrishTechNews.ie now to discuss.


Irish Tech News have a range of services available to help promote your business. Why not drop us a line at Info@IrishTechNews.ie now to find out more about how we can help you reach our audience.


You can also find and follow us on Twitter, LinkedIn, Facebook, Instagram, TikTok and Snapchat.