Defending Against New Phishing Attacks that Abuse OAuth Authorization Flows
summary
Describes a phishing technique that leverages OAuth authorization flows to gain access to Microsoft accounts (Office and Azure) even when users authenticate at the legitimate Microsoft login page with valid certificates and MFA enabled. Covers how the OAuth-based attack bypasses MFA and provides full data access, and outlines detection methods and mitigation strategies to stop these authorization-flow phishing attacks.
AI-written summary · about
chapters (7)
- 0:00Start
- 22:33Proactive Measures: Research
- 26:51Security Operations: Assess
- 29:08Security Operations: Prevent
- 34:54Security Operations: Detect
- 37:27Security Operations: Mitigate
- 41:56Security Operations: Analyze
related talks
01h 00mDefending Against New Phishing Attacks that Abuse OAuth Authorization Flows
49mThe Death of Conventional MFA: How AiTM Attacks Are Changing the Game
41mBeginner’s Guide to Bypassing Modern Authentication Methods to SSO
47mHacking OAuth
55mAzure Attacks Unpacked: Real-World Threats & Lessons
38mAbusing Azure Active Directory: From MFA Bypass to Listing Global Administrators
40mFighting Where They Aren't: How Attackers Avoid Endpoints in Modern Attacks
40mPurple Team Auth: Hacking & Bypassing MFA Systems, and How to Armor Up