Attackers are going after prominent individuals through OAuth phishing, FBI warns

Attackers are targeting prominent individuals, their relatives and personal contacts to gain persistent access to their accounts, including private emails and files, the FBI has warned. The FBI’s Internet Crime Complaint Center (IC3) says the activity, which uses a technique called “OAuth consent phishing,” has been ongoing since late 2025. The FBI describes it as “a deceptive, sophisticated approach to access user accounts without requiring a password.” OAuth is a framework that lets one applic

Original reporting by Help Net Security · Sinisa Markovic. GridIndex is an aggregation and intelligence layer — full credit to the original publisher.