AdvisoryMicrosoft 365
Passkey-Themed Phishing Hits Microsoft 365 Accounts
Microsoft warns that threat actors tied to ShinyHunters and Helix extortion crews are using passkey-themed social engineering, not real passkey abuse, to compromise Microsoft 365 accounts and slowly exfiltrate cloud data.