# Device Code Phishing: OAuth 2.0 Attacks in Google & Azure

DevFeed: [Device Code Phishing: OAuth 2.0 Attacks in Google & Azure](<https://devfeed.tech/articles/device-code-phishing-oauth-2-0-attacks-in-google-azure-54507.md>)

Original publisher: [Read original article](<https://www.huntress.com/blog/oh-auth-2-0-device-code-phishing-in-google-cloud-and-azure>)

Author: Matt Kiely

Published: 2025-02-06T00:00:00Z

Content type: comparison

Language: en

Sources: [Huntress Blog](<https://devfeed.tech/sources/huntress-blog.md>)

Topics: [OAuth 2.0](<https://devfeed.tech/topics/oauth2.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Azure](<https://devfeed.tech/topics/azure.md>), [Google](<https://devfeed.tech/topics/google.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [azure](<https://devfeed.tech/tags/azure.md>), [device](<https://devfeed.tech/tags/device.md>), [device-code-phishing](<https://devfeed.tech/tags/device-code-phishing.md>), [google](<https://devfeed.tech/tags/google.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [oauth-2-0](<https://devfeed.tech/tags/oauth-2-0.md>), [phishing](<https://devfeed.tech/tags/phishing.md>)

## AI overview

This case study compares how Google and Azure implement OAuth 2.0, focusing on device code phishing and how implementation differences affect the attack surface and potential blast radius.

## Source excerpt

All OAuth 2.0 implementations are equal. Some are just more equal than others. This blog covers device code phishing and compares OAuth implementations between Google and Azure. Does OAuth implementation impact the efficacy of hacker tradecraft? Find out here!