Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing
…The researchers have found that the kit’s blocklist currently contains 230 vendor names and is constantly updated. eSentire recommends disabling the OAuth device code flow when not needed, restricting OAuth consent…