Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year.
A new malicious kit called EvilTokens integrates device code phishing capabilities, allowing attackers to hijack Microsoft ...