#6
BleepingComputer
general
April 04, 2026 at 14:17 UTC
Device code phishing attacks surge 37x as new kits spread online
By Bill Toulas
AI Summary
Device code phishing attacks exploiting OAuth 2.0 Device Authorization Grant flow have surged 37 times this year as new attack kits spread online. These attacks abuse the legitimate device authorization process to hijack user accounts by tricking victims into entering codes on attacker-controlled devices. The dramatic increase indicates cybercriminals are rapidly adopting this technique to bypass traditional authentication protections.
Relevance score: 83.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →