Pawn Storm Abuses OAuth In Social Engineering Attacks

This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.

APT28 relies on PowerPoint Mouseover to deliver Graphite malware

The 13 Most Common Types of Social Engineering Attacks + How to Defend Against Them

OAuth, Breaking Cybersecurity News

Pawn Storm behind cyber-attacks on organisations conducting Winter Olympics

TrustedSec Practical OAuth Abuse for Offensive Operations – Part 1

Pawn Storm Abuses OAuth In Social Engineering Attacks

What are Social Engineering Attacks? Types of Attacks in 2023

GitHub - netskopeoss/phish_oauth: POC code to explore phishing attacks using OAuth 2.0 authorization flows, such as the device authorization grant.

OAuth, Breaking Cybersecurity News

Salt Labs Oh-Auth - Abusing OAuth to take over millions of accounts

Pawn Storm's Lack of Sophistication as a Strategy

OAuth, Breaking Cybersecurity News

Probing Pawn Storm: Cyberespionage Campaign Through Scanning, Credential Phishing and More - Security News

OAuth, Breaking Cybersecurity News

What Are Social Engineering Attacks and How to Prevent Them - SEON