Content by microsoft security research, krithika ramakrishnan, bharat vaghela, vaibhav deshmukh, subhajit ghosh, anusha chakraborty, akash chaudhuri, victor chingtham and ivan macalintal (1)

Microsoft Security Research and co-authors document an intrusion pattern where passkey-themed helpdesk lures lead to identity compromise, MFA persistence, Microsoft Graph reconnaissance, and large-scale data collection from SharePoint, OneDrive, and Exchange Online, with practical hunting queries and mitigation guidance for defenders.