Microsoft Warns of AI Invoice Fraud and Passkey Account Takeovers

Microsoft has uncovered two major campaigns involving AI-assisted invoice fraud and passkey-themed phishing targeting enterprise users. One operation sent more than one million emails impersonating executives and ServiceNow to trick finance teams into making fraudulent ACH payments. The second used fake IT-support messages, adversary-in-the-middle pages, and device-code authentication to compromise Microsoft cloud accounts, register attacker-controlled MFA methods, and steal data from Exchange, SharePoint, and OneDrive. Defenders should monitor authentication-method changes, suspicious sign-ins, and high-volume Microsoft Graph activity across cloud environments.

Reference: https://thehackernews.com