Entra passkey enrollment vishing targets Microsoft 365 users
ID: 4b8a0f71-ac31-564a-bf5b-f17366b5e729
STIX ID: report--4b8a0f71-ac31-564a-bf5b-f17366b5e729
Feed Name: Bleeping Computer
Threat Score
A malicious vishing campaign attributed to O-UNC-066 (Pink) calls Microsoft 365 users and directs them to convincing phishing sites that mimic Entra passkey enrollment; an operator-controlled PHP kit captures credentials and MFA responses in real time, allowing attackers to register passkeys they control, access SharePoint/OneDrive data, and publish stolen samples on an extortion site to pressure victims for ransom.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.