Pawn Storm Abuses OAuth In Social Engineering Attacks

This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.

DEF CON 29 - TIB AV-Portal

Must Read - Security Affairs

Salt Labs Oh-Auth - Abusing OAuth to take over millions of accounts

Probing Pawn Storm: Cyberespionage Campaign Through Scanning, Credential Phishing and More - Security News

Ontological Model of a Social Engineering Attack [in accordance with 10].

Oauth Token Stealing - Red Team Blog

Oauth Token Stealing - Red Team Blog

APT28 Archives - Security Affairs

GitHub - netskopeoss/phish_oauth: POC code to explore phishing attacks using OAuth 2.0 authorization flows, such as the device authorization grant.

Pawn Storm's Lack of Sophistication as a Strategy

What are Social Engineering Attacks? Types of Attacks in 2023