OAuth Consent Phishing: The Attack a Password Change Does Not Fix

The FBI IC3 warns of consent phishing — malicious OAuth apps that gain persistent access to your email and files. Changing your password does not…