OAuth device code attack

Massive Microsoft 365 Device Code Phishing Campaign Targets Global Organizations with EvilTokens PhaaS

An extensive Microsoft 365 phishing campaign abusing the OAuth device code flow has impacted more than 340 organizations across the ...