Summary
Microsoft has issued a warning about a sophisticated phishing campaign that tricks users into updating passkeys via fake IT calls, leading to the compromise of cloud accounts and exfiltration of sensitive files from SharePoint, OneDrive, and Exchange.