The technique is known as device code phishing. It exploits “device code flow,” a form of authentication ... that logs it into the account. Device authorization relies on two paths: one ...