Technical Guide
10 min read
The MFA Attack That Uses Microsoft's Own Website Against You: OAuth Device Code Abuse in Home Health
A new phishing technique active since September 2025 bypasses MFA without stealing passwords — by tricking users into entering a code on Microsoft's real website. Here is how it works, why home health staff are prime targets, and how to stop it.
Read article