OAuth token theft
Named by 2 kept items in this workspace.
Search every workspace for OAuth token theft. It matches the name as written, so it can find other things that share it.
The items that name it 2
Attackers steal access and refresh tokens after the victim completes MFA, bypassing MFA and surviving password resets
Attackers pushed a malicious code update to Klue's integration system capable of collecting OAuth tokens used by Klue customers to connect to their own systems.
All techniques in this workspace.