Prosegur Cybersecurity: companies are extremely vulnerable to new method of digital fraud using legitimate codes to bypass traditional defenses
Publish Date: 2026-05-26 04:16:00
Source Domain: www.marketscreener.com
Madrid, 26 May 2026.- Prosegur Cybersecurity, Prosegur Security’s specialized cybersecurity unit, has detected a notable increase in device code phishing, which is hitting companies and organizations across a range of sectors. Based on the misuse of legitimate access codes, this form of digital fraud has increased 37-fold between 2024 and 2026, driven by techniques that find loopholes in corporate authentication systems.
Unlike traditional phishing, this approach stands out for its ‘zero footprint’ nature. The attackers do not use malicious files or fraudulent links that can be blocked by conventional antivirus. Instead, they employ a strategy focused on convincing the user to enter a legitimate code on a seemingly official page. This opens the door to access the corporate account, a process that is carried out entirely through in-house services that bypass most organizations’ protection systems.
Persistence and automation, the pillars of the attack
Prosegur Cybersecurity’s analysis highlights two critical factors: prolonged persistence and advanced automation. Once the attacker obtains authorization, they can maintain access for weeks or even months, thanks to permissions that make it possible to reactivate sessions without user intervention, even if the organizations changes passwords. Added to this is a level of automation that accelerates intrusion: attackers use processes capable of checking emails, extracting documents and creating permanent internal access in a matter of seconds by modifying email rules or registering new applications within the corporate environment.
This dual approach, durable access and high-speed execution, creates a uniquely difficult threat for security teams to detect and contain.
Strengthening protection strategy
Prosegur Cybersecurity warns that this type of threat forces organizations to rethink their protection strategy. Security can no longer rely solely…
