1H 2026 Threat Intelligence Report

Approximately 30% of monitored organizations experienced at least one fake IT support impersonation attempt through Microsoft Teams in the first half of 2026.

Approximately 1 in every 990 external Microsoft Teams contacts showed indicators of impersonation activity in the first half of 2026.

Among confirmed malicious ClickFix findings, 25.3% leveraged blockchain-based command-and-control infrastructure.