Surge in OAuth Device Code Phishing Targets M365 Accounts

Surge in OAuth Device Code Phishing Targets M365 Accounts

First seen 22 Dec 2025, 11:57 UTC •SecurityboulevardItproGbhackers •87% similarity •27.8

Article Content

Browse articles
ThreatCluster

A significant increase in OAuth device code phishing attacks has been reported, leading to successful takeovers of Microsoft 365 accounts. These attacks grant threat actors full access to accounts, facilitating data theft and ongoing compromises. The rise in such attacks has been noted since September 2025, marking an unusual trend in the exploitation of this technique.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

M365