Teams Message Lure Referencing Passkey/SSO Update from Internal Account

Detects Microsoft Teams messages containing lures related to passkey, SSO, or MFA updates, which are frequently used by attackers to solicit user credentials or trick users into compromising their account security.

Sigma