BluePhishing Attack Abuses Microsoft Entra OAuth Consent to Create Hidden AI Agent Identities
Merged summary · from the lead articleSummaries by Vani AI
One admin consent can create persistent agent identities; Proofpoint reports no observed real-world use.
Proofpoint describes BluePhishing, a research proof of concept that extends OAuth consent phishing to Microsoft Entra Agent ID. An attacker-controlled blueprint, after one consent click, can receive AgentIdentity.CreateAsManager and mint agent identities in the victim tenant. Admin consent can grant tenant-wide application permissions; user consent is limited to delegated permissions. Proofpoint says it has not identified in-the-wild activity.
Key facts
- Microsoft documents a limit of 250 agent identities per non-Microsoft blueprint.
- Proofpoint says AgentIdentity.CreateAsManager cannot be revoked from the principal.
- Message Center post MC1506733 says default users can create blueprints from November 2026.
- Inherited permissions are visible only in runtime tokens, not the Entra portal.
- The same blueprint ID appears in every tenant that consents to it.
- Vendors
- Microsoft
- Products
- Microsoft EntraMicrosoft Graph
- Malware
- GraphRunner
- Organizations
- Proofpoint
Coverage
oldest first · one row per article · UTC- · 8h ago
GBHackersFirst report
Proofpoint details BluePhishing attack on Microsoft Entra agent identities
One admin consent can create persistent agent identities; Proofpoint reports no observed real-world use.
- · 3h ago
Cyber Security News
Hackers Could Abuse Microsoft Entra AI Agents to Hijack Enterprise Accounts Without Stealing Passwords