IOC du rapport source : https://www.microsoft.com/en-us/security/blog/2026/09/09/passkey-themed-social-engineering-leads-identity-cloud-compromise/
Affichage neutralisé. Un observable associé n'est pas une preuve de compromission ni une consigne de blocage.
domain	add-passkey[.]com	active
domain	integratedsso[.]com	active
domain	keysyncos[.]com	active
domain	myconnectkey[.]com	active
domain	oktasession[.]com	active
domain	oskeyconnect[.]com	active
domain	oskeyregister[.]com	active
domain	oskeysetup[.]com	active
domain	oskeysync[.]com	active
domain	passkeyhelpdesk[.]com	active
domain	portalsetuphub[.]com	active
domain	secure-passkey[.]com	active
domain	setupmypasskey[.]com	active
domain	syncmykey[.]com	active
domain	validationsetupac[.]com	active