Identity and Access Abuse

Moscow's crews stopped stealing passwords. Now they ask victims to approve the login.

Google's threat intelligence team ties three suspected Russian clusters to abuse of Google OAuth, app passwords and device linking. MFA completes normally, so consent telemetry is the control.