Published Jul 7, 2026, 11:14 AM ET · Updated 4 months ago · 1 source
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
The Hacker News
·
Original Report
A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC. "The campaign did not depend on a fake Microsoft password page. It used a malicious collaboration-style lure to push users into the legitimate Microsoft device login experience,