Help Net Security

Cybercriminals are building phishing pages that exist only inside victims’ browsers

A phishing campaign abuses Microsoft OAuth and Teams to redirect victims to fake login pages generated inside their browsers.