Microsoft Discloses Passkey Phishing Campaigns Hijacking Cloud Accounts, Leveraging AI in Attacks

Microsoft has revealed details of two sophisticated phishing campaigns where threat actors are exploiting third-party email delivery infrastructure to send financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. Attackers are leveraging generative artificial intelligence to create tailored email templates, aiming to hijack Microsoft Cloud accounts and exfiltrate data, primarily targeting enterprise users in the U.S. across various sectors.