Internal Teams lateral phishing with passkey/SSO lure content

Ibrahim Saud@tektrix

•updated Sep 16, 2026•0•0•1

Detects internal Microsoft Teams messages containing lures related to passkey or SSO enrollment, which is indicative of a compromised account attempting to perform lateral phishing to harvest credentials or bypass multi-factor authentication.