Phishing

Phishing is electronically delivered social engineering that uses deceptive messages or service interactions to prompt a person to open a link, execute an attachment, disclose information, or authorize access. Adversary-in-the-middle browser relaying and OAuth device-code phishing are distinct methods, not sequential stages. A device-flow authorization can yield an OAuth access token for the app and granted permissions only after user authorization; it does not yield a plaintext domain password or establish command-and-control.