Microsoft 365 users targeted by major new phishing operation - here's how to stay safe

• Quantum Route Redirect automates phishing, spoofing brands and bypassing email security tools
• It detects bots vs. humans, redirecting real users to credential theft pages
• Over 1,000 domains host it; 76% of victims are in the US, per KnowBe4

A new phishing platform called “Quantum Route Redirect” is making targeting Microsoft 365 users all around the world dramatically simpler, experts from KnowBe4 have warned.

In its report, the researchers said Quantum Route Redirect can automate phishing campaigns that previously required significant technical skill.

It enables attackers to launch large-scale credential theft operations, while spoofing major companies such as DocuSign, or send fake payroll, payment notices, and voicemail alerts. QR code-based “quishing” attacks are also available on the platform.