POPA Recon🚨🚨🚨 Cal.com founder details advanced OAuth phishing attack 🚨🚨🚨
🚨🚨🚨 Cal.com founder details advanced OAuth phishing attack 🚨🚨🚨 Attackers no longer create fake login pages. Instead, they abuse real Google OAuth flows through a legitimate-looking third-party app How it works • You receive a meeting invite (e.g. Cal.com, Calendly, or similar scheduling tools) • In the “Additional notes” or description, there’s a link that looks exactly like a normal Google Doc or .docx file • You click the “document” link • The real Google OAuth screen appears instantly, instead of opening a document, you’re taken to an official Google “Sign in with Google” page that s…
The excerpt is quoted from a public Telegram channel, which owns its text.