The actor will generate a legitimate device code authentication request ... Disabling device code flow wherever possible. Provide phishing training to all users. Revoke access tokens when Storm ...