All Microsoft users need to stay on high alert and watch out for the persistent threat of online attacks. Of course, everyone needs to be aware of cyber attacks such as phishing, but those who use products such as Windows 11, Outlook and Office need to be particularly careful due to Microsoft’s continued popularity with cyber crooks. According to the team at Check Point, the US firm remains the most impersonated technology brand on the planet.
In fact, new research suggests that Microsoft attacks now account for almost 23 percent of all brand impersonation attempts.
Things to watch out for include fake support pages, urgent updates sent via email and alerts suggesting PCs need to download new security patches to stay safe.
“In Q2 2026, Microsoft remained the most impersonated brand in phishing attacks, accounting for 23% of all brand impersonation attempts, nearly double the next closest brand,” Check Point confirmed.
Along with Microsoft, other brands are also being targeted by online crooks. These include Linkedin, Google, Apple and Amazon.
Check Point also said that Open AI’s ChatGPT entered the top ten most impersonated brands for the first time, signalling that AI tools are now firmly on criminals’ radar.
HERE ARE THE MOST IMPERSONATED BRANDS SO FAR THIS YEAR
• Microsoft – 22%
• LinkedIn – 11%
• Google – 6%
• Apple – 6%
• Amazon – 5%
• Adobe – 4%
• Facebook – 2%
• WhatsApp – 1%
• PayPal – 1%
• Chat GPT– 1%
What is phishing and how can you avoid it?
Phishing is a cybercrime in which attackers impersonate trusted organisations or individuals to steal sensitive information, such as passwords, bank details, or personal data.
They often use fake emails, text messages, websites, or phone calls that appear genuine. Victims are tricked into clicking harmful links or sharing private details. To avoid phishing, verify senders, avoid suspicious links, use strong passwords, and enable two-factor authentication whenever possible for safety.
To beat the crooks, it’s good to watch out for patterns.
A sense of urgency is often added to messages such as. payment failures, security alerts, and required updates.
Check Point also says to watch out for telltale signs such as distorted logo, a button that doesn’t respond, icons that lead nowhere.
Finally, look out for websites that have strange addresses.
“Domains rarely match the real brand exactly. A slightly off spelling, an unusual extension, or a domain that has no business hosting that brand’s content is a strong signal on its own.”
