What is device code phishing, and why are Russian spies so successful at it?
arstechnica.com
Overlooked attack method has been used since last August in a rash of account takeovers.