OAuth consent phishing
Named by 2 kept items in this workspace.
Search every workspace for OAuth consent phishing. It matches the name as written, so it can find other things that share it.
The items that name it 2
Combines ClickFix-style fake verification with OAuth authorization code theft; victim drags identity icon into a fake Azure verification drop zone, handing over the redirection URL containing their Microsoft authorization code, which attacker exchanges for access/refresh tokens at Microsoft's token
Malicious OAuth consent flow used in a simulation; the agent inspected the redirect URI
All techniques in this workspace.