How device code phishing gives scammers access to your account

Malwarebytes explains a scam tactic in which fraudsters get victims to approve an authentication code, supposedly to view a document or enter a meeting. Instead, the approval authorizes the attacker's device, handing them entry to the victim's account and the personal information inside it.