Skyw4lker device code phishing targets U.S. organizations

A phishing campaign dubbed Skyw4lker targets American businesses by abusing legitimate cloud services and authentication mechanisms rather than traditional credential theft. Attackers exploit trusted business workflows to compromise corporate accounts while minimizing detection. ANY.RUN's analysis exposed the technique. Organizations should implement device code phishing protections and review cloud service integrations for anomalous activity.