FBI Alert: OAuth Consent Phishing is Targeting Users of Messaging Apps

**FBI advisory on OAuth consent phishing:** The FBI warns of an active campaign where attackers use social engineering and malicious OAuth application consent links—often sent via commercial messaging apps and impersonating trusted figures—to obtain persistent, high-level access to victims' accounts without passwords or MFA; once granted, access remains until tokens are revoked, allowing attackers to read/send emails and access sensitive data.