OAuth Client ID Spoofing Exploits Blind Spot in Microsoft Entra ID to Validate Stolen Credentials
Proofpoint has uncovered a novel evasion technique called OAuth client ID spoofing, exploited by at least two threat actors to validate stolen…
Tag: OAuth Client ID Spoofing
UNK_pyreq2323: OAuth Client ID Spoofing Campaign Targeting Microsoft Entra ID
UNK_pyreq2323 is a threat cluster that exploited OAuth client ID spoofing from January to March 2026, using over 700,000 spoofed client IDs…
UNK_OutFlareAZ: OAuth Client ID Spoofing Campaign Targeting Microsoft Entra ID
UNK_OutFlareAZ is a threat cluster that exploited OAuth client ID spoofing starting December 2025, leveraging Cloudflare infrastructure to target over 2 million…