Vishing Campaign Targets Microsoft 365 Passkey Enrollment, Okta Says
Okta reports that O-UNC-066, also known as Pink, has used vishing and a phishing kit to trick Microsoft 365 users into authorizing fraudulent passkeys. The activity has been observed across industries; no direct Microsoft account compromise was observed.