WeTransfer, BJ's Wholesale Club and Microsoft: GhostCode Abuses Microsoft Device Codes to Steal M365 Tokens and Register Rogue Devices
public
–
4 min read
GhostCode Phishing Kit Exploits Microsoft OAuth to Hijack M365 Accounts in Under 80 Seconds
In late August 2026, eSentire’s…