
Phishing Bypasses Microsoft 365 MFA via OAuth
A new phishing campaign targets North American businesses by tricking employees into entering an attacker-provided device code on a legitimate Microsoft 365 login page. This grants OAuth tokens for persistent access to accounts, apps like Outlook, Teams, and OneDrive without stealing credentials.
Computerworld · 210d ago






















