As cited
Copy frozen at (site build).
threat intel
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass
Device code phishing exploits a legitimate authentication feature intended for devices with limited input capabilities to bypass multifactor authentication (MFA). The technique abuses the convenience mechanism that allows users to authenticate on separate devices, and organizations can mitigate it through layered security controls.
Why it matters: Security teams managing MFA deployments need to understand this bypass vector and implement detection and user awareness measures to protect against device code phishing attacks targeting their workforce.
- Source published
- First seen by Cybersecurity Tracker