#phishing kit

Fake 'security upgrade' phone calls trick Microsoft 365 users into handing over their accounts

A criminal crew called Pink is calling staff, walking them through a fake Microsoft passkey setup, and quietly registering a login key of its own.