# How attackers turned a Teams meeting booking into a device code phishing trap

Source: [Help Net Security](https://www.helpnetsecurity.com/2026/11/13/microsoft-teams-device-code-phishing/) · 2026-11-13 · Security
Page: https://themorning.dev/story/how-attackers-turned-a-teams-meeting-booking-into-a-device-code-phishing-trap-536dea6e3a45f0f6
Kind: security · Impact: medium

## In brief

- Attackers used a fake Microsoft Teams meeting scheduler to trick an employee at a construction company into approving a device code sign-in.
- The attackers obtained a valid session token before Huntress's security operations center identified the incident.
- The attack abuses the legitimate device code sign-in flow, so the sign-in itself looks genuine.

## Why it matters

Device code phishing can yield valid session tokens without a password, so users and admins should treat unexpected device code approval requests as a serious warning sign.

## Coverage

- [How attackers turned a Teams meeting booking into a device code phishing trap](https://www.helpnetsecurity.com/2026/11/13/microsoft-teams-device-code-phishing/) — Help Net Security, 2026-11-13

Tags: phishing, device-code-phishing, microsoft-teams, session-hijacking, social-engineering

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev