Forwarded from Threat Hunting Father 🦔

eSentire GhostCode: Dissecting a Novel Device Code Phishing Kit eSentire's TRU uncovers GhostCode, a novel device code phishing kit using AES-256-GCM encryption and triple-layer HTML obfuscation to bypass MFA and hijack Microsoft 365 accounts in under 80 seconds.