Device-Code Phishing
The message gives you a code to enter on a real sign-in page for connecting devices. Entering it can sign a device the sender controls in to your account.
Also known as
- Aliases
-
- device code authentication phishing
- OAuth device code phishing
- Broader terms
-
- token theft
- Steal Application Access Token
- Named examples
-
- SquarePhish
Mapped to
MITRE ATT&CK®