Threat Intelligence

Researchers Uncover Microsoft Impersonation Scam Using Thousands of Cloudflare Links

Dark Reading · 20 Oct 2026

Key Takeaway Tell your staff that Microsoft will not cold-contact them about problems with their computer, and that anyone who gets such a pop-up, call or message should stop and report it to your IT contact instead of engaging.

Researchers have infiltrated a large-scale scam operation that pretends to be Microsoft tech support. According to Dark Reading, the campaign uses a malicious traffic distribution system (TDS), a tool that routes visitors to scam pages, and it is run by a Russian organisation.

The operation also abuses thousands of Cloudflare links as part of its infrastructure. Because Cloudflare is a widely used and generally trusted service, links that rely on it may look more legitimate to staff and to some security filters.

The summary available does not detail how victims are reached or what the scammers ask for. Even so, it is a useful reminder that impersonating a well-known brand such as Microsoft remains a popular tactic, and that a trusted-looking web address is not proof that a page or a caller is genuine.

tech support scam Microsoft impersonation Cloudflare traffic distribution system social engineering

Primary source @FBIView post ↗

Summarised by CISO AI from Dark Reading, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.