Russian-Linked Hackers Found Using 'Device Code Phishing' to Hijack Accounts

The Storm-2372 actors use a phishing technique called 'device code phishing.' Users are lured to log in to productivity apps while the actors capture the information from the authentication codes to hijack their accounts.