Pawn Storm Abuses OAuth In Social Engineering Attacks

This blog post discusses how Pawn Storm abused Open Authentication (OAuth) in advanced social engineering schemes. High profile users of free webmail were targeted by campaigns between 2015 and 2016.

What is Social Engineering Attacks? ⚔️ Types, Examples.

DEF CON 29 - TIB AV-Portal

Pawn Storm Mishandles Open Authentication in Advanced Social Engineering Attacks

Advanced Social Engineering Attacks Deconstructed - CYFIRMA

Ontological Model of a Social Engineering Attack [in accordance with 10].

Information, Free Full-Text

Google warns of APT28 attack attempts against 14,000 Gmail users

Pawn Storm Abuses OAuth In Social Engineering Attacks

The real story behind the latest Pawn Storm attack and the Windows zero-day patch release

Salt Labs Oh-Auth - Abusing OAuth to take over millions of accounts