Cyber CrimeNewGhostCode Phishing Kit Bypasses MFA
A new phishing kit abuses Microsoft's device-code flow to bypass MFA and establish persistent access to Microsoft 365 environments.
> Search
5 results for “device code”
Cyber CrimeNew
Cyber CrimePasskey phishing opens M365 data theft playbook
Microsoft ties passkey-themed social engineering to extortion gangs that blend into Microsoft 365 traffic to steal files and email.
Cyber CrimeNotion, PDFs, and PaaS: Token Theft's New Shape
Threat actor Doubloon Dredger exploits Notion and device codes to steal authentication tokens, researchers say.
Cyber CrimeForg365 PhaaS Escalates Microsoft 365 Account Takeover Risks
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.
Cyber CrimeAI-Powered Phishing Toolkit Lowers Barrier for Sophisticated Cyberattacks
Forg365, a sophisticated phishing-as-a-service platform, now combines AI-assisted lure generation with advanced AiTM and device code methods to compromise Microsoft 365 accounts and maintain persistent access.