Next-Gen Phishing Tactics Users Aren’t Ready For | Huntress

Huntress details modern phishing tactics including ClickFix, browser-in-the-browser, and OAuth consent phishing beyond basic credential harvesting.

Huntress describes a shift in phishing attacks beyond basic credential harvesting toward advanced tactics. Covered techniques include ClickFix social engineering, browser-in-the-browser (BitB) attacks, and OAuth consent phishing. The post recommends training users on these patterns through Huntress SAT simulations.

• ClickFix tricks users into executing attacker-supplied actions
• BitB fakes browser login windows to harvest credentials
• OAuth consent phishing abuses app permission flows
• Advocates simulating advanced tactics in awareness training