Serverless Phishing 2.0: Cloud Workers in Identity based Attacks
Analysts investigate attack surfaces and defenses concerning Serverless Phishing 2.0: Cloud Workers in Identity based Attacks.
Summary
Serverless Phishing 2.0 using cloud workers in identity-based attacks.
Related talks
Live Presentations·48 min
Jenko Hwong
Jenko Hwong demonstrates live phishing attacks exploiting OAuth 2.0 device authorization flows, bypassing MFA and hijacking cloud session tokens.
oauthphishingsso+2
Main Stage·46 min
Jenko Hwong
Jenko Hwong demonstrates weaponizing OAuth 2.0 Device Authorization Grant flows, creating phishing attacks that bypass MFA without fake login domains.
oauthphishingsso+2
Videos·51 min
Elias Issa
Elias Issa examines Device Code Phishing Is Dead, Long Live New Azure AD Attacks!.
phishingazureazure-ad