Russian threat actors have been abusing legitimate OAuth 2.0 authentication workflows ... The researchers simplified in the following diagram the attack flow targeting users by relying on a ...

The relevant campaigns were detected by Proofpoint, and target Outlook Web Access, PayPal, Microsoft ... OAuth apps, developers are given the freedom to select among various available flow types ...

Microsoft says its Threat Intelligence team has been observing financially motivated attacks and scams using OAuth apps as automation tools. In a new post, the team explained how threat actors ...

Microsoft classifies the attack as "consent phishing" because the attackers use the bogus apps and Azure AD-based OAuth consent prompts (pictured below) to trick targets to grant permissions to ...

Researchers have uncovered a sustained and ongoing campaign by Russian spies that uses a clever phishing technique to hijack Microsoft ... OAuth standard. Authentication through device code flow ...

Russian-linked cyber operatives have been leveraging legitimate Microsoft OAuth 2.0 authentication processes to compromise Microsoft 365 accounts of individuals and organisations associated with ...