Pawn Storm Abuses OAuth In Social Engineering Attacks

This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.

OAuth, Breaking Cybersecurity News

Detection and Mitigation of Illicit Consent Grant Attacks in Azure AD - Thomas Naunheim

Fake Honeypots: A Defensive Tactic for Cyberspace

Detection and Mitigation of Illicit Consent Grant Attacks in Azure AD - Thomas Naunheim

APT28 relies on PowerPoint Mouseover to deliver Graphite malware

TrustedSec Practical OAuth Abuse for Offensive Operations – Part 1

Pawn Storm's Lack of Sophistication as a Strategy

What is Social Engineering?

What is Social Engineering Attacks? ⚔️ Types, Examples.

Hackers Abusing OAuth Token to Take Over Millions of Accounts

Social engineering (security) - Wikipedia

Pawn Storm's Lack of Sophistication as a Strategy

What is social engineering? Definition + protection tips - Norton

DEF CON 29 - TIB AV-Portal