3
There's a Microsoft login scam running rampant — and it has nothing to do with your password (www.makeuseof.com)
submitted 8 months ago* (last edited 8 months ago) by to c/microsoft@lemmy.world
3 comments fedilink hide all child comments

all 3 comments

sorted by: hot top controversial new old
[–] 1 point 8 months ago (1 child)

This requires all authentication codes to be sent to the attacker in the first place. Why wouldn't they just put the code in themselves at that point?

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 1 point 8 months ago

    They don’t have an authentication code; just an identification code. You log in elsewhere and put in the code so Microsoft knows which device you actually want to log in on. Think e.g. logging into most streaming services on a Smart TV - get the code and take it to your phone, where you actually log in.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 1 point 8 months ago

    How is this new? Evilginx has been around for years.

  • permalink
  • fedilink
  • source
    •