Content by Microsoft Security Research, Krithika Ramakrishnan, Bharat Vaghela, Vaibhav Deshmukh, Subhajit Ghosh, Anusha Chakraborty, Akash Chaudhuri, Victor Chingtham and Ivan Macalintal (1)

Microsoft Security Research and co-authors document an intrusion pattern where passkey-themed helpdesk lures lead to identity compromise, MFA persistence, Microsoft Graph reconnaissance, and large-scale data collection from SharePoint, OneDrive, and Exchange Online, with practical hunting queries and mitigation guidance for defenders.