O-UNC-066: Threat Actor Behind Fake Passkey Vishing Campaign
July 10, 2026
O-UNC-066 is a threat actor tracked by Okta that has been conducting voice-based phishing attacks targeting Microsoft 365 users. The actor uses fake passkey enrollment pages to gain unauthorized access and carry out data extortion. They operate a data leak site named Pink and are linked to the cybercrime collective The Com.