MadApe phishing kit turns Microsoft device-code sign-in into a route to account access
A phishing operation dubbed MadApe tricks people into completing Microsoft’s legitimate device-code sign-in flow, potentially handing attackers access to their accounts. Group-IB says it identified 155 root domains in the campaign’s infrast
Open discussion →