#ParsedReport #CompletenessLow
09-09-2026

Passkey-themed social engineering leads to identity and cloud compromise

https://www.microsoft.com/en-us/security/blog/2026/09/09/passkey-themed-social-engineering-leads-identity-cloud-compromise/

Report completeness: Low

Actors/Campaigns:
Shinyhunters
Cordial_spider
Helix

Threats:
Aitm_technique
Device_code_phishing_technique
Bec_technique
Spear-phishing_technique

Victims:
Microsoft 365 users, Sharepoint online, Onedrive for business, Exchange online

TTPs:
Tactics: 8
Technics: 1

IOCs:
Domain: 18
File: 9
Coin: 1

Soft:
Microsoft Defender, Microsoft Defender for Endpoint, Microsoft Teams, Graph API, Node.js, Chrome, Outlook, Microsoft SharePoint, Microsoft OneDrive, Microsoft Exchange, have more...

Algorithms:
hmac-sha1

Functions:
count

Languages:
python