OAuth Token Theft Through Microsoft's Front Door

A sideloaded package turns a Microsoft-signed binary into an OAuth token theft tool. No phishing domain, no spoofed UI, no browser. Here's how to detect it.

Summary from Huntress Blog.

Explained

The technology and terms in this story. Learn more

More in Identity

Cloudflare & Ping Identity: Identity Security in the Era of AI

VideoCloudflare2d agoIdentityAI

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

Microsoft Security Blog2d agoAppSecIdentity

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

The Hacker News2d agoThreat IntelNetworkIdentity

Infostealer riding the AI Train

Check Point Research2d agoThreat IntelIdentityAI

Microsoft 365 accounts compromised at 79 organizations, no passwords needed

Help Net Security2d agoCloudIdentity