Pawn Storm Abuses OAuth In Social Engineering Attacks

This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.

APT28 hacked Roundcube email servers of Ukrainian entities

What are Social Engineering Attacks? Types of Attacks in 2023

Pawn Storm Abuses OAuth In Social Engineering Attacks

DEF CON 29 - TIB AV-Portal

Mandiant identifies 3 hacktivist groups working in support of Russia

Shining a Light on OAuth Abuse with PwnAuth

Probing Pawn Storm: Cyberespionage Campaign Through Scanning, Credential Phishing and More - Security News

Pawn Storm's Lack of Sophistication as a Strategy

Types of Social Engineering Attacks - dummies

Oauth Token Stealing - Red Team Blog

Social Engineering Attacks - Manipulating Your Thoughts To Fall In Trap

Oauth Token Stealing - Red Team Blog

STIDIA