Microsoft Device Code Phishing Attack Steals Tokens Through Legitimate Login Page

A new phishing technique is tricking users into handing over their Microsoft account tokens without a fake website in sight. Attackers are exploiting a legitimate Microsoft authentication feature to steal access to email, files, and chat messages. The method works well because victims never leave the real Microsoft login page during the...

Read the full article at the source.