GitHub OAuth Phishing Campaign
GitHub OAuth Phishing Campaign: K-9 Mail Token Theft Analysis unmake labs Research IOCs About High Severity GitHub OAuth Phishing Campaign: K-9 Mail Token Theft Analysis How threat actors weaponize legitimate OAuth applications to steal persistent Gmail access via GitHub issue spam — a case study in "Legitimate App, Malicious Context" attacks. Published 2026-04-10 Classification T1566.002 MITRE ATT&CK TA0006 / T1606 Reporter frankSx ⚠️ Threat Summary A targeted OAuth phishing link was delivered via a GitHu...
