ThreatVectr
Tag

#Device Code phishing

9 stories taggedDevice Code phishing.

A digital illustration showing a hacker targeting Microsoft 365 through OAuth
Identity & Access

Kali365 Phishing Kit Turns Microsoft's Own Login Page Against US Firms

A new criminal toolkit tricks staff into approving attacker device codes on genuine Microsoft screens, handing over long-lived access to email and cloud files.

3 min read
Photoreal editorial shot of a dimly lit modern office desk at night, a laptop screen glowing with a generic blurred sign-in form, a smartphone beside it showing
Identity & Access

Greatness Phishing Kit Adds a New Trick to Steal Logins Without Passwords

The rented phishing toolkit now abuses Microsoft's own login flow to walk around multi-factor authentication.

4 min read
Full-frame edge-to-edge photoreal overhead shot of a darkened open-plan office at night, single monitor glowing with a generic email client interface blurred be
Identity & Access

Russian hackers turn hotel Wi-Fi into a trap for Microsoft 365 logins

Microsoft says APT29 sub-group Storm-2945 has been hijacking guest Wi-Fi at hotels and conference centres since May, planting two new malware families to steal corporate accounts.

4 min read
Full-frame edge-to-edge overhead photoreal shot of a generic black Android smartphone face-up on a matte gray desk, screen glowing pale blue with abstract geome
Identity & Access

Device Code Phishing: The Login Trick That Blew Up in 2026

A login flow built for smart TVs is now one of the fastest-growing routes into corporate accounts, and identity teams are struggling to keep up.

4 min read
Extreme close-up of a server rack's blinking status lights in a darkened data centre, rows of ethernet cables in cool blue and amber tones, shallow depth of fie
Identity & Access

Changing Your Password No Longer Kicks Hackers Out

A growing wave of attacks steals not passwords but the digital passes that keep you logged in, meaning a password reset leaves the intruder sitting comfortably inside your account.

4 min read
Full-frame edge-to-edge photoreal news-editorial image of a modern office desk at night, a laptop screen showing a blurred generic corporate login form and a ph
Identity & Access

Forg365: A $400-a-Month Kit That Hijacks Microsoft 365 Logins

A new subscription phishing service uses device codes, session theft and AI-written lures to break into corporate email accounts.

3 min read
Full-frame photoreal editorial shot of a dimly lit open-plan office at night, a desk phone glowing under a single lamp, a laptop screen out of focus in the back
Threat Intelligence

Helix: the new extortion crew phoning staff to raid SharePoint files

Researchers at ReliaQuest say the group impersonates managers on the phone, tricks staff into a login trap, then hoovers up company documents from Microsoft SharePoint.

3 min read
Photoreal editorial shot of a dimly lit modern office desk at night, a laptop screen glowing with a generic blurred sign-in form, a smartphone beside it showing
Identity & Access

New Phishing Kit 'ARToken' Exposes Full Microsoft 365 Takeover Playbook

Cisco Talos researchers found more than 80 hidden commands inside a phishing service tied to the EvilTokens platform — including tools to steal Microsoft 365 logins, read mailboxes, and quietly hide their tracks.

4 min read
Identity & Access

Device Code Phishing Is Eating MFA. Behavioral Detection Is the Backstop.

Token theft and consent-grant abuse sidestep the second factor entirely. Defenders are leaning on anomaly detection because the login looks legitimate.

3 min read
© 2026 Threat Vectr