Product
Microsoft 365 Outlook
- First Reported
- Jul 22, 2026
- Latest Reported
- Jul 22, 2026
Reported Context (1)
- The attacker uses those tokens from their own systems, often registering devices, logging on to Microsoft 365 Outlook, and creating mailbox rules so the access survives and stays unnoticed. Device-Code Phishing Turns Legitimate Microsoft Sign-In Into an MFA Bypass
People (4)
MITRE ATT&CK (12)
Vendors (1)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.