- FBI warns of rising OAuth consent phishing attacks exploiting legitimate app permissions
- Victims tricked into granting malicious apps access, enabling email reading and sending
- Password changes don’t help; users must revoke tokens in app security settings
Hackers found a way to access your data, read your messages, and even send emails to your contacts, without ever needing your password or other login credentials. All they need from you is a single click on a completely legitimate, well-known platform.
