Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
With the intention of conducting data extortion operations, a threat actor has been targeting businesses in various industries with voice-based phony security demands that force Microsoft 365 users to enroll a new Entra passkey.
The panel-controlled phishing kit used by the threat actor, identified by Okta as O-UNC-066, can attack the passkey enrollment procedure. The food and beverage, technology, healthcare, automotive, construction, and aviation industries have all been singled out by the activities.
As part of a voice-enabled phishing (or "vishing") strategy, the threat actor registers domains that contain the word passkey, according to Okta researcher Houssem Eddine Bordjiba. The threat actor then makes phone calls to the targeted users in an effort to convince them that they m...