The activity, observed since May 2026, relies heavily on social engineering. Victims may receive a phone call, SMS message, or Microsoft Teams message from someone impersonating the organization’s IT helpdesk. The attacker claims that the user must urgently update a passkey, multifactor authentication (MFA), or SSO setting to avoid losing access. The victim is then […]
The post Passkey Phishing Hijacks Microsoft 365 Accounts for Cloud Data Theft appeared first on Cyber Security News.