New ConsentFix Attack Let Attackers Hijack Microsoft Accounts by Leveraging Azure CLI

A sophisticated new phishing attack technique called “ConsentFix” that combines OAuth consent phishing with ClickFix-style prompts to compromise Microsoft accounts without requiring passwords or multi-factor authentication. The attack leverages the Azure CLI app to gain unauthorized access to victim accounts. The ConsentFix attack operates entirely within the browser context, making it difficult for traditional security […]

The post New ConsentFix Attack Let Attackers Hijack Microsoft Accounts by Leveraging Azure CLI appeared first on Cyber Security News.