Passkeys cannot be phished the way passwords can, so attackers have changed targets. A vishing campaign documented by Okta Threat Intelligence talks employees through a fake Microsoft Entra sign-in page. Meanwhile, the attacker uses what the victim types to sign…

The post Attackers Can’t Steal Passkeys, So They’re Enrolling Their Own appeared first on Security Boulevard.

Deepak Gupta

Source: Security Boulevard
Source Link: https://securityboulevard.com/2026/11/attackers-cant-steal-passkeys-so-theyre-enrolling-their-own/