New ConsentFix attack hijacks Microsoft accounts via Azure CLI
From BleepingComputer to All on Thu Dec 11 10:59:22 2025
A new variation of the ClickFix attack dubbed 'ConsentFix' abuses the Azure CLI OAuth app to hijack Microsoft accounts without the need for a password or to bypass multi-factor authentication (MFA) verifications. [...]