PREY-0058 AiTM Passkey/MFA Lure Domain Hunt
Detects interaction with known infrastructure associated with the PREY-0058 campaign, which utilizes Adversary-in-the-Middle (AiTM) phishing lures mimicking passkey or MFA registration pages to target Microsoft 365 and other SaaS applications.
Microsoft Sentinel (KQL)

