Surge in BEC Attacks Leveraging Microsoft Device Code Phishing
Eye Security reports a sharp increase in business‑email‑compromise (BEC) attacks that abuse Microsoft’s device code flow, tricking users into entering codes on legitimate Microsoft pages while attackers gain persistent access. The research outlines detection, prevention, and forensic techniques to combat this hard‑to‑spot phishing vector.