Makeuseof
New Microsoft Login Scam Exploits Device Code Phishing Technique
First seen 1 Mar 2026, 15:10 UTC
•
•25.0
Export
Article Content
Browse articles
A new Microsoft login scam is rapidly spreading, utilizing a method known as device code phishing. This technique does not involve stealing passwords; instead, it tricks users into granting access to their accounts by exploiting a legitimate authentication feature. Users of Microsoft services are particularly affected as hackers manipulate the device authorization flow.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2026-02-28
First article published detailing the scam
2026-03-01
Additional articles published warning about the scam
More articles in this cluster
Continue Reading
Microsoft Office 0-day Vulnerability CVE-2026-21509 Exploited; Emergency Fix Released
APT28 Exploits Zimbra Vulnerability in Ongoing Attacks Against Ukraine
Microsoft SharePoint Attacks: Over 400 Victims Including US Agencies
Russian SVR Exploits SolarWinds and Other Vulnerabilities Against U.S. Networks
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials