Skyw4lker device-code phishing targets US Microsoft 365 accounts
Password-protected contract lures and Google Sites lead victims into a real Microsoft login that hands over tokens.
68
Password-protected contract lures and Google Sites lead victims into a real Microsoft login that hands over tokens.
ANY.RUN linked 618 analyses from June through October 21, 2026, with monthly cases rising from 20 to 200.
Today 37 readers · 37 views · 29 reads · all time 158K views