⤷ Title: DeviceCodePhishing: How a New Attack Bypasses FIDO and MFA Protections
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 28 Apr 2025 00:30:43 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Entra security #Cybersecurity Threats #DeviceCodePhishing #FIDO2 phishing #MFA Bypass #OAuth attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 28 Apr 2025 00:30:43 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Azure Entra security #Cybersecurity Threats #DeviceCodePhishing #FIDO2 phishing #MFA Bypass #OAuth attacks
Daily CyberSecurity
DeviceCodePhishing: How a New Attack Bypasses FIDO and MFA Protections
DeviceCodePhishing exploits OAuth Device Code Flow to bypass MFA and FIDO protections, redirecting victims to real sites with no phishing signs.
⤷ Title: DeviceCodePhishing: A New Automated Tool Bypasses MFA & FIDO for Azure Entra Users
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 12 Jul 2025 00:52:55 +0000
════════════════════════
⌗ Tags: #Open Source Tool #access tokens #Authentication #Azure Entra #cybersecurity #Device Code Flow #Device Code Phishing #DeviceCodePhishing #FIDO #headless browser #MFA Bypass #phishing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 12 Jul 2025 00:52:55 +0000
════════════════════════
⌗ Tags: #Open Source Tool #access tokens #Authentication #Azure Entra #cybersecurity #Device Code Flow #Device Code Phishing #DeviceCodePhishing #FIDO #headless browser #MFA Bypass #phishing
Penetration Testing Tools
DeviceCodePhishing: A New Automated Tool Bypasses MFA & FIDO for Azure Entra Users
DeviceCodePhishing is a new tool that automates Device Code Flow attacks, bypassing MFA and FIDO to steal access tokens from Microsoft Azure Entra users.