Index live· 1,284 files · 148 editions
ForensicPost

Search the index

3 results
Try
Results for “Consent phishing”Newest first
25-0923
File

One Technique, One Platform, Several Hundred Companies

What concentrated was not the data but the method. Every tenant presents the same consent screen and the same vocabulary for a caller to use.

ShinyHuntersConsent phishingCloudExtortion
Sev 4TargetSaaS platform tenantsActorShinyHunters
25-0806
File

Operators Posing as IT Staff Had Employees Authorise a Connected App

Every anti-phishing control is looking for a fake site. There was no fake site — the employee consented on the real one.

ShinyHuntersConsent phishingCloudIdentity
Sev 4TargetEnterprise SaaS tenantsActorShinyHunters
25-0311
File

The Consent Screen Asks a Question Nobody Can Answer

A control that is correct 999 times out of 1,000 teaches people to stop reading it. That is not user failure.

MultipleConsent phishingCloudMethod
Sev 3TargetSaaS consent modelsActorMultiple
ForensicPost

Independent reporting on digital forensics and incident response.

SectionsBreachesRansomwareNation-stateCloud
DataCase filesData exportActor indexGlossaryMethodology
ContactSecure tipsCorrectionsThe deskEthics
© 2026 ForensicPost Media · the desk · newsletterGlossaryNo search logging