Field Analysis
OAuth Client-ID Spoofing Turns App Identity Into Enumeration Noise
Two large Entra ID campaigns used hundreds of thousands to millions of fictional OAuth client IDs to spread account enumeration across apparent applications.
Tag
#OAuth Abuse
1 article covering OAuth Abuse across campaign analysis, detection engineering, and defender tradecraft.