Index live· 1,284 files · 148 editions
ForensicPost

Search the index

2 results
Try
Results for “Device code phishing”Newest first
26-0429
File

ShinyHunters Campaign Compromised More Than a Thousand Organisations via Device Code Phishing

More than a thousand organisations through device code phishing. There is nothing to patch, which is why the campaign has no natural ceiling.

ShinyHuntersDevice code phishingCloudTokens
Sev 4TargetSaaS tenants, multipleActorShinyHunters
25-0813
File

Attackers Registered Their Own MFA Device After Phishing an SSO Code

A stolen code is worth one authentication. An enrolled device is worth all of them, and a password reset does not remove it.

ShinyHuntersMFA enrolmentCloudIdentity
Sev 4TargetEnterprise SSO accountsActorShinyHunters
ForensicPost

Independent reporting on digital forensics and incident response.

SectionsBreachesRansomwareNation-stateCloud
DataCase filesData exportActor indexGlossaryMethodology
ContactSecure tipsCorrectionsThe deskEthics
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging