Microsoft's legitimate device-code entry page — the exact prompt victims are socially engineered into completing A new phishing kit lets criminals hijack Microsoft 365 accounts without stealing any ...