Google Takes Second Swing at OAuth Worm
Mitigations put in place by Google in May 2017 to help block phishing attacks such as the recent OAuth worm weren’t enough to completely mitigate the issue, as Google’s platform still allowed malicious OAuth clients to be submitted under deceiving names, Proofpoint security researchers say.
Read more: Google Takes Second Swing at OAuth Worm
Story added 26. July 2017, content source with full text you can find at link above.