It exploits “device code flow,” a form of authentication formalized in the industry-wide OAuth standard. Authentication through device code flow is designed for logging printers, smart TVs ...

Russian threat actors have been abusing legitimate OAuth 2.0 authentication ... following diagram the attack flow targeting users by relying on a Visual Studio Code first-party application ...

Microsoft 365 accounts were recently revealed to be the target of "device code flow" OAuth phishing by Russia-related threat actors. Google notes that the latest versions of Signal include ...