In embracing device code phishing, attackers trick victims into handing over account access by using a service's legitimate new-device login flow.
Tycoon 2FA Phishers Scatter, Adopt Device Code Phishing
Summary + source link. No paywalls, no tracking.