Biometric login: fake IT calls hand scammers a work account

Our Take

Biometric login scams expose a rising corporate threat as fake IT callers trick staff into enrolling rogue passkeys and handing over work accounts. Attackers bypass passwords by directing targets to register an unauthorized authentication device under the guise of an IT upgrade. Once enrolled, the attacker gains persistent access to corporate Microsoft 365 environments without triggering alerts. ━━━━━━━━━━━━━━━━━━━━━━━━━━━ WHAT TO…