Passkey-Themed Lateral Spearphishing via Compromised Teams Account

Detects Microsoft Teams messages containing urgent language and themes related to passkey or SSO updates, which are indicative of a phishing attempt aimed at harvesting credentials or performing account takeover.