pduggusa

// ─────────────────────────────────────────────────────────────────────────────
// Device-Code Vishing Detection — Huntress Scope
// DugganUSA LLC · Patrick Duggan · 2026-05-05
//
// This is the attack chain Microsoft published on May 3, 2026 — the same
// vish-chain we'd warned Medtronic about on March 16. Attacker calls victim,
// walks them through microsoft.com/devicelogin, victim enters the attacker's
// code, attacker walks out with a refresh token for the victim's tenant.
//
// Three queries: