Microsoft 365

Device Code Phishing Hits Microsoft 365: What to Know

A sophisticated phishing campaign is actively targeting Microsoft 365 accounts at more than 340 organizations across Canada, the United States, Australia, New Zealand, and Germany, using a technique called device code phishing to capture authentication tokens that persist even after a password reset. Security researchers first detected the attacks on February 19, 2026, and the […]

Device Code Phishing: The Attack MFA Can’t Stop

News / POPP3R

A new device code phishing attack campaign has compromised over 340 organizations across five countries, including Canada, since February 19, 2026, and the pace is accelerating. Researchers at Huntress, who published their analysis this week, found that multi-factor authentication provides no protection against this attack class. Employees who complete MFA challenges believe they are signing

Device Code Phishing: The Attack MFA Can’t Stop Read More »

Device Code Phishing Hits Microsoft 365: What to Know

Device Code Phishing: The Attack MFA Can’t Stop

Quick Links

Services