Disclaimer: All research and opinions expressed here are my own and are independent of any employer or organisation.

phaas

2 posts tagged with "phaas"

Device Code Lab (DCL) — Deep Dive into a Device Code Phishing Toolkit

May 28, 2026

A deep dive into Device Code Lab, a professional grade, device code phishing platform, with numerous defense evasion and post-exploitation features.

Threat Intelligence Threat Hunting device-code phishing token-theft

Device Code Phishing Campaign — Infrastructure Update

Mar 18, 2026

A follow-up investigation mapping 1,337 phishing URLs across 326 workers.dev hostnames, confirming a PhaaS multi-tenant architecture, encrypted client-side payloads, and new lure variants targeting Adobe, DocuSign, and Outlook branding.

Threat Hunting entra microsoft threat hunting