Russia Aligned Phishing Campaign Abuses Microsoft 365 Device Code Authentication
Researchers link a Russia aligned threat group to a phishing campaign abusing Microsoft 365 device code authentication to steal credentials and enable account takeover across government and academic sectors.