Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year. [...]
Device code phishing attacks surge 37x as new kits spread online
Summary + source link. No paywalls, no tracking.