[H4ckN3ws]Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

[ThaHaka 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt

This is the hidden content, please

• Sign In
• or
• Sign Up

365 users to enroll a new Entra passkey with an aim to carry out data extortion attacks. The threat actor, tracked by Okta under the moniker O-UNC-066, has deployed a panel-controlled phishing kit that's capable of targeting the passkey enrollment process. The

This is the hidden content, please

• Sign In
• or
• Sign Up