Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments.

The first campaign, per the tech giant, involved sending over a million scam emails between August 3 and 5, 2026, by masquerading as chief executive officers

from The Hacker News https://ift.tt/fktwb7r
https://ift.tt/JX5WLyv

About the Author

Leave a Reply

Your email address will not be published. Required fields are marked *

You may also like these