Device Code Authentication From Known Suspicious Hosting Networks

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•1

Identifies device code sign-ins originating from infrastructure previously associated with phishing operations and adversary-controlled relay servers.