Top 2026 2FA & AiTM Detection: Illicit OAuth Consent Grant to Malicious Application

Ibrahim Saud@tektrix

•updated 11 days ago•0•0•1

Detects instances where a user grants OAuth consent to a non-verified application requesting high-privilege scopes related to mail access (Mail.Read, Mail.Send) and persistence (offline_access, full_access_as_app), which is a common indicator of consent phishing attacks.