Biometrics: Fake Passkey Texts Hijack Microsoft 365
Our Take
Biometrics and passkeys promised phishing immunity, but a new Microsoft 365 campaign exposes how fake enrollment prompts hijack enterprise accounts. Attackers send urgent SMS messages disguised as corporate IT teams demanding immediate passkey registration. Once approved, the adversary registers their own hardware credential and gains full cloud access. ━━━━━━━━━━━━━━━━━━━━━━━━━━━ WHAT TO LOOK FOR ━━━━━━━━━━━━━━━━━━━━━━━━━━━ Watch for unexpected SMS alerts directing…
This is DeFlock The USA’s original commentary. The video above is the work of CaraComp, published on YouTube — full credit to the creator.