Essential information

Value / Name

http://ppsrq.org/so/3dPniokM8/c

Confidence

100/100

Revoked

Yes

Valid from

20/04/2026 22:30

Valid until

20/05/2026 04:12

Pattern type

stix

Published

21/04/2026 11:27

Modified

20/05/2026 04:13

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://ppsrq.org/so/3dPniokM8/c']

Labels / Tags

Labels: credential theft device code flow graph api microsoft entra id oauth persistent access phishing token hijacking

Marking (TLP)

TLP:CLEAR