[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbWkxagPr6GyQrDeTdnqMNj9la-MKq7RmL9FMaxYodpw":3},{"article":4,"iocs":43,"watch_terms":47},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":27},"efbe98d8-760c-4c95-a62c-e3f795ad0dd7","Device code phishing attacks surge 37x as new kits spread online","device-code-phishing-attacks-surge-37x-as-new-kits-spread-online","Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year. [...]","Device code phishing attacks exploiting OAuth 2.0 Device Authorization Grant flow have increased over 37-fold in 2024, with threat actors distributing new attack kits online. These attacks deceive users into approving device codes that grant attackers account access without requiring traditional credentials. The proliferation of easily accessible toolkits has dramatically lowered the barrier to entry for cybercriminals.","Device code phishing attacks surge 37x as new attack kits spread online.",null,"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fdevice-code-phishing-attacks-surge-37x-as-new-kits-spread-online\u002F","2026-04-04T14:17:38+00:00","2026-04-04T16:00:29.815308+00:00",8,[17,20],{"name":18,"type":19},"OAuth 2.0 Device Authorization Grant flow","technology",{"name":21,"type":22},"Device code phishing attacks 2024","campaign","2c8f44d4-b56e-47cf-9677-04f22c9ee78d",{"id":23,"icon":11,"name":25,"slug":26},"Identity & Access","identity-access",[28,33,38],{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44],{"type":37,"value":45,"context":46},"device code phishing kits","Newly distributed attack toolkits enabling OAuth 2.0 Device Authorization Grant flow abuse",[]]