A sophisticated phishing technique called CoPhish exploits Microsoft Copilot Studio to trick users into granting attackers unauthorized access to their Microsoft Entra ID accounts.
New CoPhish Attack Exploits Copilot Studio to Exfiltrate OAuth Tokens
Related articles