Device-code phishing: How real login pages enable attacks
Most employees know the rule: Before entering your credentials, check the URL. This time around an employee receives an email about a shared file, an RFP, an invoice, or a voicemail. The message seems familiar enough, so they follow the…