device code phishing

Russian cyber threat actors have recently exploited OAuth 2.0 authentication flows to compromise Microsoft 365 accounts belonging to employees involved with Ukraine-related and human rights organizations. This sophisticated attack, tracked since early 2025, is predominantly attributed to...

In recent weeks, Microsoft 365 users have found themselves in the crosshairs of a sophisticated business email compromise (BEC) campaign that exploits the cloud service’s very reputation for trust and reliability. Rather than launching the usual barrage of phishing emails filled with tyrannical...

Published: February 17, 2025 In a sophisticated cyberattack that underscores the evolving threat landscape, Microsoft’s Threat Intelligence Center has uncovered a long-running campaign by Russian hackers intent on stealing Microsoft 365 accounts. Using a clever twist on the device code...

On February 17, 2025, cybersecurity researchers uncovered a sophisticated phishing campaign orchestrated by Russian threat actors. These hackers are leveraging a niche but potent trick known as device code phishing to hijack Microsoft 365 accounts. For Windows users—especially those managing...

In today’s digital battleground, where identity is the new perimeter, Microsoft Entra continues to be the frontline for securing your organization’s most valuable asset—its users. In the latest roundup, Entra.News has shone a spotlight on some alarming developments, most notably the emerging...

In a startling development that reads like a spy thriller, cybercriminals—allegedly with Kremlin ties—are exploiting Microsoft Teams invites to wage a sophisticated phishing campaign. If you've ever felt a twinge of apprehension upon receiving an unexpected Teams meeting invitation, you may well...

A clever new breed of phishing scam is on the rise and it's catching even the savviest users off guard. Researchers have uncovered a sustained campaign where Russian spies are using a technique known as "device code phishing" to gain unauthorized access to Microsoft 365 accounts. Windows users...