Device Code Lab - Infrastructure Expansion & New Capability Analysis
ID: 75e2c889-d8c6-575a-ae61-75e3577c914e
STIX ID: report--75e2c889-d8c6-575a-ae61-75e3577c914e
Feed Name: On the Hunt
Threat Score
**Executive summary:** This report documents the expansion and capabilities of the Device Code Lab (DCL) device-code phishing toolkit, listing new IPs and domains, TLS certificate cross-links, exposed unauthenticated mailbox UI and numerous backend modules (mailbox browsing/exfiltration, inbox listener, SMTP lure senders, SVG generator, inbox rule deployment, tenant-wide BCC/connector creation), along with detection notes and a consolidated IOC list.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.