BluePhishing Exploits Microsoft Entra OAuth to Create Persistent AI Agent Identities
Researchers have identified a novel attack technique called 'BluePhishing' that leverages Microsoft Entra's AI agent model and OAuth consent phishing. The attacker can, with a single consent click, create persistent agent identities within a victim tenant, potentially expanding the attack surface substantially. Proofpoint notes this is a proof-of-concept and no active exploitation has been observed in the wild. The attack involves configuring a blueprint in a controlled tenant, then convincing victims to consent to its permissions, resulting in the creation of a blueprint principal with persistent, impervious permissions. Once inside, attackers can request tokens and fabricate autonomous agent behavior, blending in with normal activity and making detection challenging. Defenders are advised to monitor specific Azure AD activity logs, implement least privilege policies, and educate users about third-party agent risks.
Linha do tempo
-
BluePhishing Exploits Microsoft Entra OAuth to Create Persistent AI Agent Identities
ler a análise desta fonte ocultar
Researchers have identified a novel attack technique called 'BluePhishing' that leverages Microsoft Entra's AI agent model and OAuth consent phishing. The attacker can, with a single consent click, create persistent agent identities within a victim tenant, potentially expanding the attack surface substantially. Proofpoint notes this is a proof-of-concept and no active exploitation has been observed in the wild. The attack involves configuring a blueprint in a controlled tenant, then convincing victims to consent to its permissions, resulting in the creation of a blueprint principal with persistent, impervious permissions. Once inside, attackers can request tokens and fabricate autonomous agent behavior, blending in with normal activity and making detection challenging. Defenders are advised to monitor specific Azure AD activity logs, implement least privilege policies, and educate users about third-party agent risks.