Device code phishing is exploding across the threat landscape, with new device code phishing tools emerging every week.

Research blog: https://www.proofpoint.com/us/blog/threat-insight/device-code-phishing-evolution-identity-takeover?utm_source=twitter&utm_medium=social_organic

The technique abuses legitimate enterprise resources for account takeovers. It involves social engineering to trick a target into authorizing a malicious app on their enterprise email accounts.

It was first observed around 2020 but has grown in popularity over recent years due to the publication of criminal device code phishing tools and on-demand code generation.

Successful attacks can lead to:

• Full account takeover
• Theft of sensitive information
• Fraud and business email compromise
• Lateral movement within a compromised environment
• Ransomware

Our new research blog explores why adoption of this technique has surged over the past year, shows real campaign examples, and offers defense recommendations.

#socialengineering #accounttakeover #BEC #fraud

$2.77 billion lost to Business Email Compromise (BEC) in 2024

DMARC enforcement stops the most common vector

FBI IC3 reported $2.77B in BEC losses for 2024

DMARC at p=reject prevents exact-domain spoofing

at 12.8% enforcement across 5.5M domains I scanned, 87% of the internet is still vulnerable to the attack that costs billions annually

https://dmarcguard.io/research/email-authentication/

#DMARC #EmailSecurity #BEC

📢 Sri Lanka : des hackers détournent 2,5 M$ de paiements de dette souveraine via manipulation d'emails
📝 ## 🗓️ Contexte

Source : BBC News, publié le 23 avril 2026.
📖 cyberveille : https://cyberveille.ch/posts/2026-04-24-sri-lanka-des-hackers-detournent-25-m-de-paiements-de-dette-souveraine-via-manipulation-d-emails/
🌐 source : https://www.bbc.com/news/articles/cn53vlvn3lvo
#BEC #TTP #Cyberveille

Part 2 of our #EvilTokens in-depth analysis is out!

This blog post details the AI-augmented features significantly facilitating #BEC fraud.

I believe that this AI-augmented post-compromise tooling represent a genuine breakthrough in the #PhaaS ecosystem.

https://blog.sekoia.io/eviltokens-an-ai-augmented-phishing-as-a-service-for-automating-bec-fraud-part-2/

Part 2 of our #EvilTokens analysis is live. TDR analysts uncovered the AI-augmented features that automate and scale #BEC workflows, marking a breakthrough in the #PhaaS ecosystem.

https://blog.sekoia.io/eviltokens-an-ai-augmented-phishing-as-a-service-for-automating-bec-fraud-part-2/