Passkey/SSO Themed Vishing & SMS Phishing Lure Detection

Ibrahim Saud@tektrix

•updated Sep 16, 2026•1•0•4

This rule monitors email, SMS, and voice logs for potential phishing attempts targeting user credentials. It specifically looks for social engineering lures related to passkey, SSO, or MFA updates that express urgency or imply service expiration, often masquerading as IT support communications.