OAuth Token Theft Through Microsoft's Front Door | Huntress

T1Covered by 1 source · first reported by Huntress at 23 Sept, 13:00 UTC

A sideloaded package turns a Microsoft-signed binary into an OAuth token theft tool. No phishing domain, no spoofed UI, no browser. Here's how to detect it.

security

Sources

• T1OAuth Token Theft Through Microsoft's Front Door | HuntressHuntress23 Sept, 13:00