Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign

Microsoft warns of a sophisticated campaign tricking users into updating passkeys via fake IT callsVictims redirected to adversary‑in‑the‑middle sites mimicking Microsoft login to steal accessAttackers exfiltrate files from SharePoint, OneDrive, and Exchange; phishing‑resistant MFA advisedPasskeys have made stealing passwords obsolete. To work...