Skip to content
archivebreach · 13 Sep 2026 · 10:11 UTC

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

last 60 dispatches · spectrum

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. …

grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected