Device code phishing: the Microsoft 365 scam that gets past SMBs’ MFA
Microsoft just took down EvilTokens, a phishing platform linked to more than 12,000 compromised inboxes, with Canada among the hardest-hit countries. Its technique, device code phishing, gets around multi-factor authentication. Here’s how to protect your SMB.