EvilTokens OAuth 2.0 Device Code Flow Exploit

EvilTokens, a phishing-as-a-service platform, uses Microsoft's OAuth 2.0 device authorization grant flow to access Microsoft 365 accounts without phishing pages, then applies AI to map the environment