Skip to content
Threat Feed
Subscribe

Product

Adobe

2 briefs RSS
high threat

Device Code Phishing Exploiting OAuth 2.0 Device Authorization Grant Flow

Threat actors are increasingly using device code phishing, often via Phishing-as-a-Service platforms, to compromise user accounts by abusing the OAuth 2.0 device authorization grant flow and capturing authentication tokens, enabling account takeover, data theft, and business email compromise.

Microsoft 365 +3 TA4903 device-code-phishing phishing credential-theft oAuth
2r 5t
medium advisory

Potential Adobe Hijack Persistence Mechanism

This brief outlines a potential persistence mechanism involving hijacking Adobe-related processes or components, which could allow attackers to maintain unauthorized access to a system.

Adobe Acrobat Reader +1 persistence process-injection adobe
2r 1t