LEGALAUDIT

Radar de estafas

Como reconocer Device code phishing: how scammers hijack your account with a fake meeting invite?

Publicado el

TLDR

Device code phishing abuses a legitimate sign in flow (OAuth 2.0 Device Authorization Grant) used by smart TVs, printers, and conference gear. A scammer starts a real sign in for an app they control, gets a short verification code, then...

Como funciona

Device code phishing abuses a legitimate sign in flow (OAuth 2.0 Device Authorization Grant) used by smart TVs, printers, and conference gear. A scammer starts a real sign in for an app they control, gets a short verification code, then...

Señales de alerta

  • You are asked to enter a sign in code you did not request from a device or app you did not set up. A message pressures you with urgency ("expires soon") to join a meeting, open a document, or complete a "security check." The conversation is moved to another messaging app or chatroom before you authenticate

Qué hacer

  1. 1Stop and verify: did the code originate on a device you personally initiated sign in for? If not, close the page. If you already approved the code, open the account's recent activity, connected apps, and devices
  2. 2sign out everywhere and change the password. Rev

Fuente

malwarebytes

Fuente verificada por Mythos Forensic Team

https://www.malwarebytes.com/blog/how-to/2026/09/how-device-code-phishing-gives-scammers-access-to-your-account

FAQ

Es Device code phishing: how scammers hijack your account with a fake meeting invite una estafa real?

Si. Trata el mensaje, la llamada o la solicitud de pago como sospechosos hasta que los verifiques por un canal oficial.

Cuales son las primeras senales?

You are asked to enter a sign in code you did not request from a device or app you did not set up. A message pressures you with urgency ("expires soon") to join a meeting, open a document, or complete a "security check." The conversation is moved to another messaging app or chatroom before you authenticate

Que debo hacer primero?

Stop and verify: did the code originate on a device you personally initiated sign in for? If not, close the page. If you already approved the code, open the account's recent activity, connected apps, and devices; sign out everywhere and change the password. Rev

Puede LegalAudit revisar mi caso?

Si. Abre el chat gratis y pega el mensaje, el enlace, el remitente o los datos de pago para un triage.