SkyW4lker Phishing Asks for a Code, Not Your Microsoft 365 Password
ANY.RUN tracked the SkyW4lker kit across 173 domains: password-protected lures send Microsoft 365 users to the real device login page, where one typed code hands the attacker a token.