
PhishingReviewed
SkyW4lker Microsoft 365 device-code phishing kit using csr-rooflng.com and ecmholdlnggroup.com
ANY.RUN reports that SkyW4lker (also called SkyW4lker x365 Sentinel) is an active device-code phishing kit targeting Microsoft 365 users, mainly in the United States. Phishing emails carry a password-protected attachm…
- csr-rooflng.com
- Also: ecmholdlnggroup.com, flow505.mooo.com, bigbrain.chickenkiller.com, off365acess.jumpingcrab.com (per ANY.RUN)
Reported Oct 27, 20261 report