The development represents a growing trend of increasingly sophisticated authentication bypass attacks, including the major OAuth phishing campaign that targeted Microsoft 365 users in late 2024.

On the desktop, it meant clicking the three-dot menu, digging through Settings, selecting Autofill and passwords, and finally ...