American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

A phishing campaign known as Skyw4lker is targeting American organizations, using tactics that do not rely on traditional credential theft. Instead, attackers are exploiting legitimate cloud services, authentication mechanisms, and business workflows to gain access to corporate accounts. This approach allows them to leave behind fewer obvious signs of malicious activity. The campaign has been analyzed by ANY.RUN, which has shed light on the methods used by the Skyw4lker campaign to compromise US businesses. The Skyw4lker campaign is primarily focused on targeting organizations in the United States.