Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign

Microsoft warns of a sophisticated campaign tricking users into updating passkeys via fake IT calls Victims redirected to adversary‑in‑the‑middle sites mimicking Microsoft login to steal access Attackers exfiltrate files from SharePoint…