Skyw4lker Phishing Campaign Targets US Organizations Using Device Codes

A newly analyzed phishing campaign dubbed Skyw4lker abuses legitimate cloud services and authentication workflows, specifically device codes, to compromise corporate accounts across U.S. organizations while bypassing traditional credential theft methods.