Device code phishing with Microsoft

July 28, 2023 ยท View on GitHub

The target is encouraged to visit the following link and enter a device code supplied by the adversary. In this example, the OneDrive iOS app is spoofed:

https://microsoft.com/devicelogin?whatever-adversary-wants-to-put-here-to-add-legitimacy

screenshot screenshot screenshot