Compromised Identity Sends Passkey-Themed Lures via Teams

Ibrahim Saud@tektrix

•updated Sep 18, 2026•0•0•1

Detects potential social engineering attacks in Microsoft Teams where an internal user sends multiple messages containing terms related to MFA, SSO, or passkey updates, potentially attempting to harvest credentials from other users.