Tag: passkey phishing
2 articles

Microsoft Cloud Accounts Targeted in Passkey Phishing Campaigns
Microsoft uncovered a massive phishing campaign that sent over a million scam emails in just three days, cleverly impersonating CEOs and other executives to trick companies into divulging sensitive info. The attackers then switched tactics, using passkey-themed social engineering to hijack cloud accounts and steal corporate files.

Hackers Exploit Microsoft Entra Passkey Enrollment in Voice Phishing Attacks
Hackers are using voice phishing attacks to trick Microsoft 365 users into enrolling a new Entra passkey, targeting multiple sectors including food and beverage, technology, and healthcare. They're registering domains with the word "passkey" to convincingly pose as legitimate Microsoft representatives.