Unverified50% confidenceFactExact time
Traditional OAuth phishing relies on forged login pages to lure users into granting authorization.
1
Sources
50%
Confidence
Long-term
Relevance
9/29/2026
First Seen
Sources
Related Entities
Related Claims
Unverified恶意站点可利用伪造的OAuth授权请求，在真实页面上诱导用户授权，从而无需获取密码即可控制账号80% similarUnverifiedWebAuthn 在注册时会将服务域名（Origin）与密钥绑定，使得仿冒域名的钓鱼网站无法触发合法签名68% similarUnverifiedClickFix lures users into pasting and executing malicious commands in the Windows Run dialog through a fake CAPTCHA page.63% similarUnverifiedCoPhish attacks do not require forging any pages; instead, they register malicious applications directly on the real platform and exploit the platform's own trusted domain name and interface appearance to initiate authorization requests.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/959515API
curl https://kongchang.com/api/v1/knowledge/claims/959515MCP
get_claim(id=959515)