American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

ANY.RUN’s analysis has exposed Skyw4lker, a device-code phishing campaign primarily targeting US organizations, The Hacker News reports. Instead of stealing passwords directly, the attackers abuse legitimate cloud services, authentication mechanisms and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind.