Mur d'images - Cyberveille

curated by Decio

Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

Phishers abuse Google OAuth to spoof Google in DKIM replay attack

Fake "Security Alert" issues on GitHub use OAuth app to hijack accounts

New details reveal how hackers hijacked 35 Google Chrome extensions

Threat actors misuse OAuth applications to automate financially driven attacks

Malicious OAuth applications abuse cloud email services to spread spam

GitHub: Attacker breached dozens of orgs using stolen OAuth tokens