Hackers Use Fake Microsoft Entra Passkey Enrollment to Breach M365
Cybercriminals are deploying fake Microsoft Entra passkey enrollment prompts to trick users into granting unauthorized access to Microsoft 365 accounts. This phishing technique bypasses traditional security measures by mimicking legitimate authentication flows. Organizations should educate users about verifying enrollment requests and enable additional safeguards.