TLDR Tech / IT
Microsoft Device Code Phishing Bypasses MFA Using Legitimate Login Flow
A large-scale campaign is abusing Microsoft's device code authentication flow to trick users into granting access, allowing attackers to capture tokens and maintain persistent access without needing passwords. This attack targets the authorization layer, meaning MFA and even passwordless methods don't stop it once a user completes the flow on a legitimate login page.
Read the full story