Microsoft Warns of Passkey Phishing Campaigns Leveraging Generative AI to Hijack Cloud Accounts

Microsoft has revealed details of two active cyberattack campaigns, including sophisticated passkey-themed phishing that exploits third-party email infrastructure. Threat actors are utilizing generative AI to craft highly convincing financial fraud scam emails, aiming to compromise Microsoft cloud accounts, exfiltrate data, and bypass multi-factor authentication.