welcome
Ars Technica

Ars Technica

Technology

Technology

Russian spies use device code phishing to hijack Microsoft accounts

Ars Technica
Summary
Nutrition label

74% Informative

Russian spies are using a phishing technique to hijack Microsoft 365 accounts, researchers say.

The technique is known as device code phishing.

It exploits a form of authentication formalized in the industry-wide OAuth standard.

Device authorization relies on two paths: one from an app or code running on the input-constrained device seeking permission to log in and the other from the user's browser.

VR Score

70

Informative language

66

Neutral language

28

Article tone

semi-formal

Language

English

Language complexity

63

Offensive language

not offensive

Hate speech

not hateful

Attention-grabbing headline

not detected

Known propaganda techniques

not detected

Time-value

short-lived

Affiliate links

no affiliate links