Skip to content
Threat Feed

Tag

Device-Code-Phishing

1 brief RSS
high threat

Device Code Phishing Exploiting OAuth 2.0 Device Authorization Grant Flow

Threat actors are increasingly using device code phishing, often via Phishing-as-a-Service platforms, to compromise user accounts by abusing the OAuth 2.0 device authorization grant flow and capturing authentication tokens, enabling account takeover, data theft, and business email compromise.

Microsoft 365 +3 TA4903 device-code-phishing phishing credential-theft oAuth
2r 5t