Threat Intelligence3 min read
Pink Vishing Campaign Hijacks Entra Passkeys to Steal M365 Accounts
Threat actor O-UNC-066 runs voice phishing campaign tricking Microsoft 365 users into enrolling attacker-controlled Entra passkeys. Real-time MFA bypass enables full account takeover.
Alex KowalskiJul 9, 2026