#device-code


Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Sep 22, 2026 // 23:58

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) “at every step of the […]

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

Jul 7, 2026 // 18:21

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June […]

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

Jun 18, 2026 // 19:17

The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat […]

Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing

May 18, 2026 // 10:17

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts. Despite an international law enforcement operation […]