Pawn Storm Abuses OAuth In Social Engineering Attacks

This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.

Oauth Token Stealing - Red Team Blog

Pawn Storm Abuses OAuth In Social Engineering Attacks

OAuth, Breaking Cybersecurity News

DEF CON 29 - TIB AV-Portal

OAuth, Breaking Cybersecurity News

Mandiant identifies 3 hacktivist groups working in support of Russia

Must Read - Security Affairs

DEF CON 29 - TIB AV-Portal

APT28 Archives - Page 2 of 8 - Security Affairs

The 13 Most Common Types of Social Engineering Attacks + How to Defend Against Them

DEF CON 29 - TIB AV-Portal

Information, Free Full-Text

TrustedSec Practical OAuth Abuse for Offensive Operations – Part 1

APT28 relies on PowerPoint Mouseover to deliver Graphite malware

Detection and Mitigation of Illicit Consent Grant Attacks in Azure AD - Thomas Naunheim