
Skyw4lker device-code phishing targets US Microsoft 365 accounts
Password-protected contract lures and Google Sites lead victims into a real Microsoft login that hands over tokens.
1
2 stories, newest first · one card per story

Password-protected contract lures and Google Sites lead victims into a real Microsoft login that hands over tokens.
Fake OpenAI Codex download pages on Google Sites, pushed via sponsored search and ClickFix lures, deliver malware to macOS users.
Today 37 readers · 37 views · 29 reads · all time 158K views