New Scam Enables Attackers to Access Accounts Without Knowing Passwords
Device Code Phishing Buckle up: this one’s a little bit wild…and a lot bit bad. A new scam has been hitting businesses across the US, even those who have been working hard to shore up their cybersecurity defenses. And when this attack works, the bad guys don’t even need to have a compromised or stolen password. The account or system under attack never even asks for one. We know this sounds just about impossible, but unfortunately it’s a very real threat. Here’s everything you need to know about device code phishing: what it is, why it works without a password, and what you can do to avoid becoming a victim. What Is Device Code Phishing? Device code phishing is a sophisticated form of phishing attack that convinces victims to give up access to their accounts. This time, instead of going after your username and password, the attack tries to convince you to input something called a device code. Once you do, you’ve actually given them access to your account, and they can do all ...