> New CoPhish attack steals OAuth tokens via Copilot Studio agents
[AUTHOR: Bill Toulas]
[DATE: 25/10/2025 16:16]
[LANGUAGE: EN]
A new phishing technique dubbed 'CoPhish' weaponizes Microsoft Copilot Studio agents to deliver fraudulent OAuth consent requests via legitimate and trusted Microsoft domains. [...]