Device code phishing attacks surge more than 37-fold

Phishing attacks abusing the OAuth 2.0 Device Authorization Grant flow have increased more than 37-fold in 2026. Attackers send victims a code obtained from a service provider under a pretext and trick them into entering it on a legitimate login page, authorizing the attacker’s device to access the account.