TheRainbowegoSweet007
620
32
3
Hackers are using fake Microsoft Entra passkey pages to target Microsoft 365 accounts.
The vishing campaign steals credentials and MFA responses, then attempts to register attacker-controlled passkeys while adapting to prompts in real time.
Read how the attack works: https://thehackernews.com/2026/07/hackers-use-fake-microsoft-entra.html
BlindGardener
I don’t understand what any of those words mean, but I also don’t have Microsoft 365.
camn333
Hackers (it's actually scammers using social engineering) have created a fake login page, and fooled regular users into clicking on phishing links to get then there. When the users try to login, the scammers just take the account information they used to steal the accounts.
It's being reported as something rare, but it's the most common kind of attack known to date. It's the "your account is about to be terminated!" spam emails you probably get every couple of weeks.
SpammersAreScum
TIL: Cisco says "Vishing, short for voice phishing, refers to fraudulent phone calls or voice messages designed to trick victims into providing sensitive information, like login credentials, credit card numbers, or bank details. "
djhash
Yeah there is phishing, vishing, and smishing
BlindGardener
Oh. If someone calls me and I don’t know who they are, then no matter who they claim to be I just repeat “Fuck off, I don’t know you.” Until they get bored and hang up. I’ve automated it so I don’t have to do it manually, my phone just plays it on loop.
LitterBoxKing
I take it one step further and simply don't answer my phone.
Tenugui
https://media2.giphy.com/media/v1.Y2lkPWE1NzM3M2U1ZG5id2owaGlmbGNsNXUwNHNzaXhyeTc5bjdyY3VrZTU2cWdlcXMxZyZlcD12MV9naWZzX3NlYXJjaCZjdD1n/cpBJJODbvE03S/200w.webp