SecurityThe Hacker Newsabout 4 hours ago
Fake Passkey Enrollment Targets Microsoft 365 Users
1 min read
A threat actor tracked by Okta as O-UNC-066 uses voice phishing to trick Microsoft 365 users into enrolling a fake Entra passkey. The phishing kit mimics Microsoft's passkey enrollment process, allowing the attacker to register their own passkey and gain unauthorized account access. The campaign targets food, technology, healthcare, and other industries.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
