Research / Market tracker / Research
FBI warns of persistent account access through OAuth consent phishing
On September 1, 2026: The FBI's Internet Crime Complaint Center warned that attackers are tricking targets into authorizing malicious OAuth applications, granting access to accounts and data without stealing passwords. Revoking malicious app permissions is necessary to terminate that access. It is tracked as a research move because FBI IC3 published the primary source.
Source: FBI IC3
Get next week's moves first
Updated at least weekly on the site. Subscribers get the next set of verified moves by email with the monthly report.
Subscribe free