FBI: Changing your password won’t stop email access in new OAuth phishing scam
A scam that uses legitimate logins and OAuth consent can let attackers keep reading or sending email even after a password change.
A new scam that starts with a legitimate login can give malicious cyber actors access to your email even after you’ve changed your password. According to a warning issued Tuesday by the FBI, the scam is known as “OAuth consent phishing” and is targeting people across the country.