American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

ANY.RUN's analysis reveals Skyw4lker, a device code phishing campaign targeting U.S. organizations. Attackers abuse legitimate cloud services and authentication mechanisms to compromise corporate accounts without traditional credential theft, leaving fewer signs. The campaign highlights evolving phishing tactics that bypass standard security measures.