Explain This: Device Code Phishing Attacks and OAuth Abuse Device code phishing surged 37x as attackers exploit OAuth's TV login flow to steal credentials without triggering MFA alerts.