Browsing: OAuth

The FBI’s new alert describes a phishing attack that never asks for your password. You approve a permission screen on a real Microsoft or Google page, and the attacker keeps reading your mail afterward. Resetting your password does nothing. Here is the setting that actually cuts them off.