Passkey-themed social engineering leads to identity and cloud compromise

In this article Attack chain overview Attribution Mitigation and protection guidance Learn more Microsoft Security Research is tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed by threat actor-added authentication methods, high-volume Microsoft Graph activity, SharePoint and OneDrive downloads, and email collection through REST APIs. Microsoft Security Research assesses that this sequence is consistent with automated…

Diamond Model