EvilTokens and OAuth Abuse: How Device Code Phishing Bypasses MFA
EvilTokens and OAuth Abuse: How Device Code Phishing Bypasses MFA
www.netcraft.com
EvilTokens and OAuth Abuse: How Device Code Phishing Bypasses MFA
Netcraft uncovers how EvilTokens enables large-scale OAuth device code phishing campaigns, abuses Microsoft authentication flows, and powers emerging attacks like GhostPairing.
