Hackers Hijack Microsoft Entra Accounts via Device Code Phishing

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Exploit Device Code Phishing to Compromise Microsoft Entra Accounts Hackers are targeting Microsoft Entra accounts through a combination of device code phishing and voice phishing (vishing). Victims, primarily from technology, manufacturing, and financial sectors, are deceived into entering device codes that attackers use to gain unauthorized access. The attacks exploit the OAuth 2.0 Device Authorization flow, utilizing legitimate Microsoft OAuth client IDs. 2 sources 24