consent phishing

OAuth consent phishing asks for permission instead of your password

A malicious app can ask for account access through a genuine consent screen. Learn what to check and why changing a password may not remove a permission grant.