#Social Engineering

ShinyHunters' Vishing Playbook: How a Phone Call Is Breaching SaaS-Connected Companies

Microsoft mapped a year of ShinyHunters activity to three attack paths into Salesforce and other SaaS platforms, and the most common one starts with a phone call, not an exploit. Here's how the OAuth consent trick works and how to close it.