Device Code Phishing — Device code phishing abuses an authentication workflow intended to authorize devices or applications. The attacker persuades a victim to approve a code associated with the attacker’s access attempt. The legitimate authorization service then grants access under the victim’s identity. – Authentication Deception

Added October 7, 2026

Device Code Phishing — Device code phishing manipulates a person into completing an authorization flow that benefits an attacker. The victim interacts with a legitimate service but approves access under deceptive circumstances. The attack targets the surrounding process rather than requiring a counterfeit password form. – Authorization Attacks

Added October 7, 2026