Microsoft Device Code Phishing Attack Steals Tokens Through Legitimate Login Page

A new phishing technique is tricking users into handing over their Microsoft account tokens without a fake website in sight. Attackers are exploiting a legitimate Microsoft authentication feature to steal access to email, files, and chat messages. The method works well because victims never leave the real Microsoft login page during the attack. The technique […]

The post Microsoft Device Code Phishing Attack Steals Tokens Through Legitimate Login Page appeared first on Cyber Security News.