SkyW4lker Phishing Campaign Expands, Threatening US Enterprises with Microsoft 365 Account Takeovers

SkyW4lker phishing campaign targets US enterprises by tricking users into approving legitimate Microsoft device-code sign-ins, bypassing passwords and MFA to compromise Microsoft 365 accounts. Active since June 2026, the campaign grants attackers access to corporate email, documents, and connected applications without stealing credentials.

https://cybersecuritynews.com/skyw4lker-phishing-campaign-expands-threatening-us-enterprises-with-microsoft-365-account-takeovers/