vishing

Additional coverage of this story: Pink Targets Microsoft 365 Passkey Enrollment in Phone-Led Takeovers BleepingComputer emphasizes fake Microsoft 365 sign-in pages used during live phone calls to capture passwords and enable cloud-data theft and extortion alongside attacker-controlled passkey...

Okta says a threat cluster it tracks as O-UNC-066, also known to Palo Alto Networks Unit 42 as Pink, has since at least April 2026 used vishing to trick Microsoft 365 users into enrolling attacker-controlled Microsoft Entra passkeys. The campaign is not a break in passkey cryptography; it is a...

Hackers are now combining sophisticated, customizable phishing kits with phone-based social engineering to pull off real-time, MFA-defeating attacks against single sign-on (SSO) systems used by Google, Microsoft, Okta and major cryptocurrency providers. Security teams are seeing the emergence of...

The game of cybersecurity is growing fiercer, and it seems like cybercriminals are playing like it's the Super Bowl of hacking. Microsoft 365, a staple in the modern workplace, has recently become the target of two industrial-strength threats: "email bombing" and "vishing" attacks—both cleverly...

If you thought the realm of cyberattacks couldn't possibly come up with yet another clever way to wreak havoc, guess what? The threat actors behind the persistent DarkGate Remote Access Trojan (RAT) are here to prove you wrong! In what seems to be the malware equivalent of a crime-thriller...