Browsing Tag
Device Code Phishing
1 post
Phishing attacks that abuse OAuth device authorization flows to steal access tokens and bypass normal sign-in expectations.
EvilTokens Disruption Exposes the Device-Code Phishing Gap
Microsoft and partners disrupted EvilTokens after more than 12,000 inbox compromises. Here is how device-code phishing bypasses normal expectations and what Microsoft 365 teams should change now.
