⤷ Title: The Trusted Trap: How Hackers Weaponize Microsoft’s Own Login Flows to Bypass MFA
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:03:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover (ATO) #Conditional Access #Device Code Phishing #Graphish #Microsoft 365 #OAuth 2.0 #Proofpoint #SquarePhish2 #TA2723 #UNK_AcademicFlare
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 03:03:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover (ATO) #Conditional Access #Device Code Phishing #Graphish #Microsoft 365 #OAuth 2.0 #Proofpoint #SquarePhish2 #TA2723 #UNK_AcademicFlare
Information Security News
The Trusted Trap: How Hackers Weaponize Microsoft’s Own Login Flows to Bypass MFA
Proofpoint is warning of a surge in phishing attacks in which attackers hijack corporate Microsoft 365 accounts not through fake login pages, but via a perfectly legitimate OAuth mechanism—device …
⤷ Title: Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:07:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Device Code Flow #Graphish #M365 Hardening #Microsoft 365 #OAuth #Passwordless Security #phishing 2026 #Proofpoint #QR Code Phishing #SquarePhish2 #TA2723
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:07:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Device Code Flow #Graphish #M365 Hardening #Microsoft 365 #OAuth #Passwordless Security #phishing 2026 #Proofpoint #QR Code Phishing #SquarePhish2 #TA2723
Penetration Testing Tools
Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
Both fraudulent actors and state-sponsored syndicates have commenced the large-scale deployment of a novel stratagem to usurp Microsoft