Device Code Phishing Hijacks Microsoft’s Legit Login Flow
Attackers are hijacking Microsoft’s OAuth 2.0 Device Authorization Grant—meant for TVs and IoT—to run phishing on the legit Microsoft Identity platform. Victims are lured to enter a one‑time code on a genuine Microsoft login page, letting criminals steal credentials without a fake URL. This flips the classic “check the domain” rule on its head.