Researchers at Push Security have observed a new variant of the ClickFix attack that combines “OAuth consent phishing with a ClickFix-style user prompt that leads to account compromise.”

Researchers at Push Security have observed a new variant of the ClickFix attack that combines “OAuth consent phishing with a ClickFix-style user prompt that leads to account compromise.”

Source: KnowBe4
Source Link: https://blog.knowbe4.com/new-consentfix-technique-tricks-users-into-handing-over-oauth-tokens