OAuth consent scams that seek account access without taking a password | Dead Internet Theory
Dead Internet Theory: OAuth consent phishing abuses a legitimate permission screen instead of stealing a password directly. Microsoft documents how a malicious app can gain access to mail, files, contacts, and other account data after a user grants requested permissions.