Speaker: Christian Kollee Business 

Email Compromise (BEC) is one of the most underestimated cyber threats of our time - and simultaneously the most common incident type handled by Eye Security's SOC: over 190 cases this year alone. This talk examines an attack technique that is increasingly gaining traction among cybercriminals: Device-Code-Flow Phishing. This method abuses a legitimate authentication mechanism to bypass multi-factor authentication, giving attackers undetected access to email and sensitive corporate data. We will demonstrate how these attacks work in technical terms, why they are so difficult to detect, and what concrete measures organisations can take to effectively protect their employees.