UK Report Fraud passkeys awareness campaign
Public Sector Action
Summary
Hide ▲
Show ▼
UK’s Report Fraud service launched a new public awareness campaign urging users to adopt passkeys, responding to a sharp rise in account-takeover fraud and stolen funds. The campaign matters because it pushes a more phishing-resistant login method to reduce losses tied to email and social media hacking. It also aligns with broader public messaging from the NCSC on improving account protection.
Related Happenings
NCSC passkey login guidance shift
Public Sector Action
H score24
First: 23.04.2026 11:45
Last: 23.04.2026 11:45
Sources 1
About this happening:
The UK National Cyber Security Centre (NCSC) has backed passkeys as the first choice of login and stopped recommending passwords except where passkeys are unavailable,...
NCSC passkey login guidance shift
Public Sector ActionAbout this happening: The UK National Cyber Security Centre (NCSC) has backed passkeys as the first choice of login and stopped recommending passwords except where passkeys are unavailable,...
Tycoon 2FA-Storm-1747 ecosystem shift changes threat-actor operations
Threat Actor Meta
H score82
First: 05.03.2026 08:51
Last: 05.03.2026 08:51
Sources 1
About this happening:
Tycoon 2FA is a commercial phishing-as-a-service ecosystem that moved from adversary-in-the-middle credential harvesting into device-code phishing after a March...
Tycoon 2FA-Storm-1747 ecosystem shift changes threat-actor operations
Threat Actor MetaAbout this happening: Tycoon 2FA is a commercial phishing-as-a-service ecosystem that moved from adversary-in-the-middle credential harvesting into device-code phishing after a March...
Latest development: 17.05.2026 17:43
eSentire says Tycoon2FA now uses device-code phishing to target Microsoft 365 accounts, with invoice-themed lure emails carrying Trustifi click-tracking URLs that redirect through Trustifi, Cloudflare Workers, obfuscated JavaScript layers, and a fake Microsoft CAPTCHA page before sending victims to microsoft.com/devicelogin. The kit also adds anti-analysis defenses, including detection of Selenium, Puppeteer, Playwright, and Burp Suite, plus blocks for security vendors, VPNs, sandboxes, AI crawlers, and cloud providers.
Timeline
-
06.10.2026 12:15 2 articles · 1h ago
Report Fraud launches a passkeys awareness campaign
Industry Or Public Sector UpdateUK Report Fraud launched a public awareness campaign urging internet users to switch to passkeys after reporting a sharp rise in money stolen through email and social media account takeovers. The service said scammers netted £6.3m ($8.3m) in 2025/6, up from £1.2m ($1.6m) the year before, and account-takeover reports rose 34%.
Show sources
- Police Urge Passkey Use After Surge in Cybercrime Profits — www.infosecurity-magazine.com — 06.10.2026 12:15
- Police Urge Passkey Use After Surge in Cybercrime Profits — www.infosecurity-magazine.com — 06.10.2026 12:15