Squarephish : OAuth Device Code Authentication Flow & QR codes

SquarePhish is an advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes. See PhishInSuits for more details on using OAuth Device Code flow for phishing attacks. Attack Steps An attacker can use the email module of SquarePhish to send a malicious QR code email to a victim. …