---
id: 10099
title: "Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows"
source_domain: volexity.com
source_url: "https://www.volexity.com/blog/2025/04/22/phishing-for-codes-russian-threat-actors-target-microsoft-365-oauth-workflows/"
published_at: "2025-04-22T12:31:56Z"
tags: ["vulnerability-research", "threat-intelligence", "phishing", "apt", "oauth", "russia", "ukraine", "m365", "microsoft-365", "device-code-phishing", "volexity"]
phying_url: "https://phying.com/item/10099"
lang: en
---

# Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

## Summary

# Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows April 22, 2025 Charlie Gardner, Josh Duke, Matthew Meltzer, Sean Koessel, Steven Adair, and Tom Lancaster Since...

## Intelligence Metadata

- **Sources:** volexity.com
- **Published:** 2025-04-22T12:31:56Z
- **Original:** https://www.volexity.com/blog/2025/04/22/phishing-for-codes-russian-threat-actors-target-microsoft-365-oauth-workflows/
- **Phying News:** https://phying.com/item/10099