OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users from legitimate sign‑in pages to attacker‑controlled infrastructure.
Attackers could have exploited the vulnerability to escalate privileges, violate user privacy while browsing, and access sensitive resources ...