In this episode of SecOps Weekly, Staff Threat Researcher Mitchel Parish breaks down the growing threat of device code phishing: a technique that abuses legitimate authentication flows to silently harvest access and refresh tokens from unsuspecting users. Mitchel also walks through a real attack chain that uses Calendly routing forms and Cloudflare Workers to host convincing lures and examines how AI-powered phishing kits have dramatically lowered the bar for pulling off these attacks. 00:00 - 02:34: Welcome to SecOps Weekly! 02:35 - 7:00: PhaaS kits & identity attacks 07:01 - 13:07: Abuse of trusted services 13:08 - 16:59: The lure 17:00 - 22:26: The foothold 22:27 - 30:27: Mitigation opportunities About Zscaler Zscaler (NASDAQ: ZS) is a pioneer and global leader in zero trust security. The world’s largest businesses, critical infrastructure organizations, and government agencies rely on Zscaler to secure users, branches, applications, data & devices, and to accelerate digital transformation initiatives. Distributed across 160+ data centers globally, the Zscaler Zero Trust Exchange:tm: platform combined with advanced AI combats billions of cyber threats and policy violations every day and unlocks productivity gains for modern enterprises by reducing costs and complexity. ©2025 Zscaler, Inc. All rights reserved. Zscaler, Zscaler Digital Exchange, Zscaler Internet Access, ZIA, Zscaler Private Access, and ZPA are either (i) registered trademarks or service marks or (ii) trademarks or service marks of Zscaler, Inc. in the United States and/or other countries. Any other trademarks are the properties of their respective owners. #devicecodephishing #socialengineering #threatresearch #microsoftentraid #CTI

 547      0