STORM-2372 USED THE DEVICE CODE PHISHING TECHNIQUE SINCE AUGUST 2024

Summary from the TLDR InfoSec newsletter

Microsoft Threat Intelligence reported that Storm-2372, an advanced persistent threat (APT) group, has been using a device code phishing technique since August 2024 to bypass multi-factor authentication (MFA) and gain unauthorized access to targeted accounts.