OAuth Consent Phishing
OAuth Consent Phishing
Articles on OAuth consent-based phishing attacks, including ConsentFix and ClickFix techniques that hijack Microsoft 365 accounts through fake permission prompts and social engineering.
oauth consent phishing2 hours ago4 min
AI Cybersecurity Threats 2026: How EvilTokens Turned Phishing Into a Subscription Service
Microsoft's September 2026 takedown of EvilTokens exposed an AI-powered phishing-as-a-service platform that sold device-code phishing and a cybercrime chatbot on Telegram, compromised more than 12,000 Microsoft 365 inboxes, led to a lawsuit with Health-ISAC, and ended with two arrests in the UK.