Threat actors are employing sophisticated passkey-themed phishing campaigns to compromise Microsoft cloud accounts and exfiltrate data. These campaigns leverage third-party email delivery infrastructure to send millions of financial fraud scam messages. Microsoft reports that attackers are using social engineering to breach cloud environments, with some activity linked to extortion groups like ShinyHunters, highlighting the evolving nature of credential theft.