
Skyw4lker device-code phishing targets US Microsoft 365 accounts
Password-protected contract lures and Google Sites lead victims into a real Microsoft login that hands over tokens.
1
2 stories, newest first · one card per story

Password-protected contract lures and Google Sites lead victims into a real Microsoft login that hands over tokens.

ANY.RUN linked 618 analyses from June through October 21, 2026, with monthly cases rising from 20 to 200.
Today 37 readers · 37 views · 29 reads · all time 158K views