Social Engineering - 1

2026 (3)

September (2)

security: Passkey-themed social engineering leads to identity and cloud compromise

Microsoft Security Blog

2026-09-09

Microsoft describes a threat campaign using passkey-themed social engineering to compromise identities and extend access into cloud services. The activity includes MFA persistence, Microsoft Graph reconnaissance, and access to SharePoint, OneDrive, and email data, with guidance on detection and mitigation.

security: Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Microsoft Security Blog

2026-09-02

Microsoft Threat Intelligence reported a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based implant. The campaign uses social engineering and legitimate tools to move from initial access to lateral movement, with Microsoft Defender used for detection and disruption.

July (1)

security: Email threat landscape: Q2 2026 trends and insights

Microsoft Security Blog

2026-07-23

Microsoft reports that Q2 2026 saw continued declines in several phishing techniques after disruption of the Tycoon2FA platform. Attackers shifted toward Teams-based social engineering and more automated, multi-stage attack chains.