New phishing tool DEBULL exploits Microsoft device code flow

A novel phishing campaign utilizes a specialized tool named DEBULL to compromise Microsoft 365 accounts by abusing the legitimate device code authentication flow. This method bypasses traditional credential harvesting by tricking users into entering a malicious code directly into the official Microsoft login portal. Attackers distribute these threats through collaboration-themed lures that appear as legitimate document sharing or meeting invitations. Source

Read the full article at the source.