Passkey-themed phishing attacks lead to Microsoft 365 data theft
Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services. [...]
What happened
Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services. [...]
Why it matters
The incident may affect operational continuity, asset safety or trust around Microsoft. Watch for verified scope and remediation.
Affected entities
View evidence
2 reports · 1 original report · 2 independent
- BleepingComputerPrimary source · Supports · EN · 100%Passkey-themed phishing attacks lead to Microsoft 365 data theft ↗
- The Hacker NewsIndependent · Supports · EN · 54%Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data ↗
Claims
- Passkey-themed phishing attacks lead to Microsoft 365 data theft Observed
Conflicts
No material conflict detected in the available evidence.
Timeline
- First reported
- Unverified · 64/66%
Market move following event
Market reaction is not yet available for this asset and time window.