Phishing

While modern phishing techniques like device code authorization phishing are still prevalent, a new vishing technique leveraging Entra ID passkeys is now stepping into the spotlight. Take a look as we dive into how passkey vishing works, and explain how a new Com-adjacent actor tracked by Okta as O-UNC-066, leverages these in their vishing campaigns.

An AI-powered PhaaS campaign leaned on legit-vendor redirects and device-code phishing — but spoofing left a fingerprint. One KQL query plus a 5-minute MDE automation loop neutralized over 1,200 malicious emails in 48 hours.