Hackers target Microsoft Entra accounts in device code vishing attacks
(bleepingcomputer.com)
1.
2.
Microsoft 365 accounts targeted in wave of OAuth phishing attacks
(bleepingcomputer.com)
3.
OAuth Device Code Phishing: Azure vs. Google Compared
(bleepingcomputer.com)