Microsoft 365 Users Targeted by Device Code Phishing Attacks

Attackers are targeting Microsoft 365 users through device code authorization phishing, which tricks users into approving access tokens. This method exploits Microsoft's OAuth 2.0 device authorization grant flow, allowing attackers to gain control of enterprise accounts. The trend indicates a shift from traditional password theft to exploiting modern authentication mechanisms to bypass multi-factor authentication.