SecurityBleepingComputerabout 1 hour ago
Passkey Phishing Steals Microsoft 365 Data
1 min read
Threat actors linked to ShinyHunters and Helix use passkey-themed social engineering to compromise corporate Microsoft 365 accounts. Attackers impersonate IT help desks, directing victims to AiTM phishing sites or device-code flows to capture credentials and session tokens.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
