Scam ads in Yahoo Mail led to fake Microsoft support alert

Sponsored Taboola ad rows in AT&T's Yahoo Mail led readers to a fake Microsoft security alert with a support phone number. The whack.sh scanner traced the kit to 536 cloud hostnames, mostly on Microsoft Azure Container Apps, and 160 phone numbers.

• Scam pages ran on 536 hostnames between July 12 and October 10, 2026
• The kit listed 160 phone numbers, 126 of them US toll-free
• The scam appeared only to Windows desktops on home broadband
• Tech support fraud losses reported to the FBI hit $1.46B in 2024