Exploitation of Device Code Authentication

Recent phishing campaigns by Russian APT groups have successfully exploited device code authentication, targeting unsuspecting victims. These attacks trick users into authenticating their accounts through processes typically associated with devices such as smart TVs and printers, leading them to share one-time passcodes with the attackers. Security firm Velexity has connected these incidents to at least three Russian APT groups, including APT-29, which is affiliated with Russia's SVR intelligence agency. This innovative approach highlights the evolving nature of phishing techniques and the need for increased vigilance among users.