Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

Author(s): Charlie Gardner, Steven Adair, Tom Lancaster
Organization: Volexity

Open article directly Open article on Archive.org

2026-07-17 ⋅ Volexity ⋅ Sean Koessel, Steven Adair
Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitation
Behinder UTA0533

2025-10-08 ⋅ Volexity ⋅ Callum Roxan, Killian Raimbaud, Steven Adair
APT Meets GPT: Targeted Operations with Untamed LLMs
UTA0388

2025-04-22 ⋅ Volexity ⋅ Charlie Gardner, Josh Duke, Matthew Meltzer, Sean Koessel, Steven Adair, Tom Lancaster
Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows
UTA0352 UTA0355

Propose Change Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication