SkyW4lker Phishing Kit: Microsoft 365 Threat to US Firms

Reported 04 Nov 2026 by otx · Severity: medium

SkyW4lker is an active device-code phishing kit targeting Microsoft 365 users primarily in the United States, Europe, and other regions. By exploiting Microsoft's legitimate authentication process, attackers gain access to corporate accounts without stealing passwords or bypassin