#OAuth-Phishing

1 article

EvilTokens PhaaS: Bypassing MFA via OAuth Device Code Flow

The EvilTokens platform has compromised 340+ Microsoft 365 organizations by weaponizing OAuth Device Code Flows to bypass multi-factor authentication.

Runtime Rebel Intel

4 min read·May 19, 2026