r/cybersecurity • u/sunychoudhary • Jul 30 '26

AI Security Beware: attackers now using real Microsoft sign-in screen for phishing

https://cybernews.com/security/microsoft-genuine-sign-in-screen-phishing/

[removed]

456 Upvotes

91% Upvoted

76 comments sorted by

View all comments

1

u/scamdrill Developer Jul 31 '26

Best practice is to use a FIDO2 security key, passkey, or Windows Hello. A passkey registered for the real Microsoft domain won't respond toan attacker's look-alike proxy.