DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
A sophisticated device code phishing campaign targeting Microsoft 365 accounts has been observed between late June and early July 2026, leveraging collaboration-themed…
Tag: Storm-2372
Storm-2372: Microsoft-Identified Threat Actor Behind Device Code Phishing Campaigns
Storm-2372 is a threat actor documented by Microsoft in February 2025, known for using messaging and Teams-style lures to trick victims into…