Microsoft led brand-impersonation phishing in Check Point’s Q3 2026 data
Original title: Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks
Apple and Google each had 8%, while later lures spoofed Claude, Google Antigravity, Apple, and Docusign.
Check Point Research says Microsoft accounted for 33% of brand-impersonation attempts in the third quarter of 2026, up from 23% and about four times any other brand. Apple and Google followed at 8% each, with technology brands ahead of social networks and banking. Separate examples after or at the edge of that period used Claude and Anthropic payment-failure mail, a fake Google Antigravity site, spoofed Apple support pages, and Docusign sites pushing a FleetDeck installer.
- Microsoft’s share rose from 23% in the previous quarter to 33%.
- Dropbox and YouTube recorded the biggest climbs in the rankings.
- A Claude lure claimed a €500 payment failed and sought payment details.
- The Antigravity site’s Linux command downloaded and executed a remote script.
- Fake Docusign pages offered a FleetDeck installer for remote device access.
Impact: credentials, payment details, or code run on the victim’s computer
- 1.Do not run terminal or installer commands from unexpected brand or support pages.
- 2.Treat unsolicited Claude payment and Docusign update prompts as phishing.
- Organizations
- Check Point Research
From the original article
2 min read at helpnetsecurity.com
Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point Research in the third quarter of 2026, up from 23% in the previous quarter and roughly four times the share of any other brand. Top 10 most impersonated brands in phishing attacks (Source: Check Point) Apple and Google followed with 8% each. Dropbox and YouTube recorded the biggest climbs in the rankings.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.