OTX Threat: SkyW4lker Phishing Kit: Microsoft 365 Threat to US Firms

SkyW4lker is an active device-code phishing kit exploiting Microsoft 365 authentication processes across the United States, Europe, and other regions. Operating since June 2026, it bypasses MFA by abusing legitimate OAuth 2.0 device-code flows, granting attackers access to corporate accounts without stealing passwords. The kit uses phishing emails with password-protected attachments containing lin Sectors: Technology, Manufacturing, Government