Device Code Phishing: The Microsoft 365 Attack That Walks Past MFA http:// scamdrill.com/blog/m365-oauth- device-code-phishing
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
Device Code Phishing: The Microsoft 365 Attack That Walks Past MFA http:// scamdrill.com/blog/m365-oauth- device-code-phishing
Device code phishing turns Microsoft's own OAuth authentication against M365 users, bypassing MFA with cheap PhaaS kits. How attackers industrialized a legitimate https:// deafnews.it/en/article/device- code-phishing-legitimate-authentication-becomes-the-weapon-to-breach-m365
A misconfigured server exposed three Evilginx phishing operations targeting Microsoft 365, including an MFA bypass that defeats FIDO2 and passkeys via Microsoft's OAuth https:// deafnews.it/en/article/misconf igured-server-exposes-three-evilginx-operations-targeting-microsoft-365