thehackernews.com
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
A new phishing campaign, Skyw4lker, targets U.S. manufacturing, technology, and healthcare firms by sending password‑protected business documents that lure victims into a legitimate Microsoft device‑authorization flow. The attackers host the documents on Google sites, then redirect users to Microsoft authentication, where the victim unknowingly grants access tokens. ANY.RUN’s sandbox analysis revealed obfuscated JavaScript, a PHP backend, and repeated polling to capture IP and geolocation data. The FBI’s 2024 complaint data shows phishing remains the most reported internet [...]