How device code phishing gives scammers access to your account
3 min
EvilTokens made phishing-as-a-service look easy. Then it got taken down
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
in the wild 3 min2
GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds
in the wild 6 min5
GhostCode Abuses Microsoft Entra Device Enrollment to Maintain Access After Token Revocation
in the wild 5 min3
N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
in the wild 6 min5
Passkey-themed phishing attacks lead to Microsoft 365 data theft
in the wild 6 min3
Attackers use passkey-themed scams to hijack Microsoft 365 accounts
in the wild 3 min1
Hackers Pose as IT Support to Hijack Microsoft 365 Accounts With Fake Passkey Alerts
in the wild 5 min2
Passkey-themed social engineering leads to identity and cloud compromise
in the wild 15 min2
New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs
in the wild 6 min1
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics
in the wild 7 min1
CaptiveCrunch: Midnight Blizzard Weaponizes Hotel Wi-Fi Captive Portals to Steal Microsoft 365 Credentials
in the wild