#device code authentication

1 story

#account compromise #account takeover #ai chatbot #ai-assisted attacks #business email compromise #cybercrime #email fraud #eviltoken #microsoft #microsoft entra #oauth abuse

Microsoft shuts down AI scam platform that stole 12,000 accounts
EvilTokens used an AI chatbot to automate email compromise and fraud at scale, forcing Microsoft to take down 50 websites.
Ars Technica · 1m