Device Code Phishing is more common than you´d think. Simply because it works better than asking for a username and password.

This session will show you common attack scenarios targeting both regular users and admins (god forbid) with device code phishing, and of course what we can implement to prevent it from occurring. We will also look at enumeration from an external/guest point of view to identify an appropriate target to phish.