How attackers turned a Teams meeting booking into a device code phishing trap
MentionsMicrosoftMicrosoft Teams
Attackers used a fake Microsoft Teams meeting scheduler to trick an employee at a construction company into approving a device code sign-in. They got a valid session token before Huntress’s security operations center identified the incident. Device code phishing abuses a real Microsoft sign-in flow.
Summary from Help Net Security.
Explained
The technology and terms in this story. Learn more