New phishing tool DEBULL exploits Microsoft device code flow

A novel phishing campaign utilizes a specialized tool named DEBULL to compromise Microsoft 365 accounts by abusing the legitimate device code authentication flow. This method bypasses traditional credential harvesting by tricking users into entering a malicious code directly into the official Microsoft login portal. Attackers distribute these...

Read the full article at the source.