Will passkey-phishing campaigns compromise 50+ M365 accounts by Oct 2026?
[Auto-closed — deadline passed with no qualifying event] Deadline was 2026-10-02. Today is 2026-10-04 (deadline has passed). The resolution criteria required public disclosure by Microsoft, security researchers, or law enforcement confirming 50+ documented account compromises attributed to passkey-phishing campaigns by the deadline. No such public disclosure confirming 50+ compromise cases exists in available evidence.
Evidence: https://threatodds.com/markets/92819531-495f-45d7-ac92-4e47accda5e3Market Overview
AI GENERATEDMicrosoft disclosed that ShinyHunters, Helix, and other extortion gangs are deploying passkey/SSO-themed social engineering to breach corporate Microsoft 365 accounts. Source: Bleeping Computer.
Primary SourceResolution Criteria
Public disclosure by Microsoft, security researchers, or law enforcement confirming 50+ documented account compromises attributed to passkey-phishing campaigns in 2026.