BleepingComputer · Jul 2, 2026 14:00 UTC

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

Summary

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA bypass tactics work and how to defend against them. [...]

Original reporting

Open original source

Related coverage

Read full article on BleepingComputer

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

Original reporting

Related coverage

How a heat dome works

Russia says EU negotiator identity is irrelevant

Treasury says Trump Account investment options will include State Street, BlackRock and Vanguard ETFs

Israel uses cattle herd to secure Syrian border area

Building U.S. Energy Abundance Over Time

How the US Has - Mostly - Avoided the Dark Side of the World Cup