Microsoft 365 users beware: A sophisticated vishing campaign is targeting passkey enrollment, and it's a serious threat. The cyber extortion group Pink has been actively exploiting Microsoft's own security measures, using a panel-controlled phishing kit to impersonate legitimate login pages. This well-crafted attack not only mimics Microsoft's branding and the targeted organization's identity but also leverages the company's recent security upgrade reminders, making it all the more convincing. What's more, the hackers are financially motivated, as they explicitly state on their darknet leak site, indicating a clear profit-driven agenda. The targeted sectors include food and beverage, technology, healthcare, automotive, construction, and aviation, making it a broad and potentially devastating threat. The campaign's success hinges on the attackers' ability to manipulate users into enrolling in a passkey, all while they simultaneously register their own passkey in the victim's account. This is a critical issue that demands immediate attention and action from Microsoft and its users alike. The use of subdomains like assignpasskey[.]com, deploypasskey[.]com, passkeydeploy[.]com, passkeyadd[.]com, and setpasskey[.]com further emphasizes the scale and complexity of this attack. As the threat landscape continues to evolve, it's crucial to stay vigilant and proactive in protecting our digital assets. This incident highlights the need for robust security measures and user awareness to combat sophisticated cyber threats.
