> For the complete documentation index, see [llms.txt](https://baric6.gitbook.io/barics-knowledge-base/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://baric6.gitbook.io/barics-knowledge-base/security-programs/phishing/squarephish-phishing.md).

# Squarephish phishing

SquarePhish is an advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes. An attacker can use the email module of SquarePhish to send a malicious QR code email to a victim. The default pretext is that the victim is required to update their Microsoft MFA authentication to continue using mobile email. The current client ID in use is the Microsoft Authenticator App.

Download 

{% embed url="<https://github.com/secureworks/squarephish>" %}