security1 publisher
Storm-3121 callers demand an urgent passkey update to harvest Microsoft 365 session tokens
Microsoft has tracked passkey- and SSO-themed help desk impersonation since May 2026, with the calls steering employees into adversary-in-the-middle proxies and device-code grants that hand over live Microsoft 365 sessions.
Publishers:bleepingcomputer.com
Reality
- Evidence60
- Adoption45
- Hype gap+12
- Incentives62
- Confidence58