Passkey-themed phishing attacks lead to Microsoft 365 data theft

Extortion groups including ShinyHunters and Helix are executing advanced social engineering campaigns disguised as passkey and SSO prompts to compromise corporate Microsoft 365 accounts. These attacks bypass traditional multi-factor authentication, leading to widespread data theft from cloud services. IT administrators must monitor for anomalous login attempts and enforce strict conditional access policies.