Passkey-themed social engineering leads to identity and cloud compromise

Reported 09 Sep 2026 by otx · Severity: medium

Multiple cloud accounts have been compromised through passkey-themed social engineering campaigns since May 2026. Attackers impersonate IT helpdesk staff via phone calls or SMS, directing victims to phishing sites that mimic Microsoft sign-in pages. After obtaining credentials th