Landing page providing the OAuth 2.0 authorization code Source: Volexity Using social engineering, the attacker tries to trick the victim to send back the code above, under the pretense that it is ...

It exploits “device code flow,” a form of authentication formalized in the industry-wide OAuth standard. Authentication through device code flow is designed for logging printers, smart TVs ...