Search Engine Vulnerabilities, Ghost Tokens, Anna Kournikova
Hacker And The Fed
00:00
OAuth Fishing: A Social Engineering Campaign
OAuth fishing has been very, I want to say, hasn't been prominent as opposed to other kind of social engineering campaigns you're kind of used to. And so what they're doing is they are tricking people into downloading the application. Once authorized and giving authority for your credentials into access that application, then they can turn off or put their project into limbo.
Transcript
Play full episode
