Attackers use passkey-themed scams to hijack Microsoft 365 accounts
Microsoft tracks ongoing M365 cloud intrusions since May using passkey-themed helpdesk vishing, AiTM phishing, and device-code abuse.
78
Threat actor
Microsoft Security Research (tracking)
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 11, 2026
- Last mentionedSep 11, 2026
Timeline
1 articles · newest firstAppears with
- SharePointproduct · 1
- Microsoft 365product · 1
- AttackIQvendor · 1
- OneDriveproduct · 1
- Microsoftvendor · 1
- Microsoft Defender for Endpointproduct · 1
- Exchange Onlineproduct · 1
- Microsoftorganization · 1
- Microsoft 365vendor · 1
- AttackIQorganization · 1
- Microsoft Graphproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.