Skyw4lker Phishing Campaign Targets US Firms

ANY.RUN analyzed Skyw4lker, a device code phishing campaign targeting US manufacturing, technology, and healthcare organizations. The FBI recorded 193,407 phishing complaints in 2024 and over 1 million internet crime complaints in 2025. The campaign uses Google-hosted infrastructure to trick victims into completing Microsoft 365 authentication flows, granting attackers access to corporate accounts without traditional credential theft.