American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

The Skyw4lker phishing campaign targets U.S. organizations in manufacturing, technology, and healthcare by exploiting legitimate Microsoft authentication flows via device code phishing, bypassing traditional credential theft. It uses business-themed lures and Google-hosted infrastructure to trick victims into authorizing access tokens, enabling attackers to compromise corporate accounts with fewer detectable signs.