SecurityThe Hacker Newsabout 3 hours ago
DEBULL Tool Abuses Microsoft Device-Code Flow
1 min read
A campaign using a reusable tooling layer called DEBULL abuses Microsoft's legitimate device-code authentication flow to hijack M365 accounts. The phishing technique bypasses MFA by tricking victims into entering an attacker-provided code on microsoft.com/devicelogin. DEBULL is assessed as a phishing-as-a-service platform using GraphSpy-derived workflows for post-exploitation.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
