Microsoft Details Passkey Phishing Campaigns

Microsoft disclosed two campaigns where attackers used passkey-themed social engineering to breach cloud accounts. Threat actors impersonated IT help desks, calling employees to update passkeys, then redirected them to fake Microsoft sign-in pages. This allowed them to capture credentials or gain access via adversary-in-the-middle flows, leading to data exfiltration from SharePoint and OneDrive.