Let’s Look at Device-Based Phishing

Channel	Publish Date	Thumbnail & View Count	Actions
Pax8	2025-02-13 09:36:23	214 Views	View on YouTube View Channel

In this episode of The Game, Matt and Dom dive deep into the world of device authentication attacks. Unlike traditional phishing, which often targets session tokens through fake websites, device-based attacks are much more subtle and difficult to block.

They’ll deploy GraphRunner (created by Beau Bullock), a post-exploitation toolset for interacting with the Microsoft Graph API and demonstrate how it enables attackers to easily steal authentication tokens without triggering typical security defenses.

Key Topics Covered:
What is Device-Based Phishing?
Understanding the Microsoft Device Registration Exploit
How GraphRunner is used in device-based phishing
Real-World Application of Device Authentication Attacks
Mitigation Strategies for MSPs and Defenders

If you’re in the security space or just interested in understanding the mechanics behind advanced phishing techniques, this episode is a must-watch.

Like and Subscribe to stay up to date on our latest episodes. Remember, we’re live on YouTube every Wednesday at 2 PM MT.

⎯⎯⎯⎯⎯⎯⎯⎯

CONNECT WITH THE HOSTS

Dominic Kirby | SSCP | Sr. Director of Professional Services | Pax8
LinkedIn: /in/dominickirby
YouTube: youtube/DomKirby
Website: domkirby.com

⎯⎯⎯⎯⎯⎯⎯⎯

LINKS

Learn More About Pax8
Why Pax8? – http://pax8.io/gmg150PJmU1
Explore our cloud marketplace – http://pax8.io/3Xl650PJmUV

Subscribe To Our Channel
Never miss an episode of The Game – http://pax8.io/5yxJ50JJ3Z3

Follow Us
LinkedIn – http://pax8.io/1jFu50JJ423
Twitter – http://pax8.io/AAth50JJ42u
Facebook – http://pax8.io/A4gR50JJ43f

Shop Pax8 Club
See our collection of softwear – http://pax8.io/3Cwp50PJmVl