corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0be03-a3d4-73f4-bf49-b921a787642e

Breaking down a supply chain attack leveraging a malicious Google Workspace OAuth app

Red Canary · published 4 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at redcanary.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
13
Words captured
1,811

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.darktrace.com/blog/cyberhaven-supply-chain-attack-exploiting-browser-extensions
darktrace.com
Understanding OAuth application attacks and defenses Read at the source ↗
redcanary.com
https://www.cyberhaven.com/engineering-blog/cyberhavens-preliminary-analysis-of-the-recent-malicious-chrome-extension
cyberhaven.com
The art and science of effective security storytelling Read at the source ↗
redcanary.com
https://developer.chrome.com/docs/webstore/api
developer.chrome.com
https://developers.google.com/workspace/admin/reports/v1/appendix/activity/token
developers.google.com
https://developers.google.com/identity/protocols/oauth2/scopes
developers.google.com
https://github.com/GAM-team/GAM
github.com
https://support.google.com/a/answer/7281227?hl=en
support.google.com
https://admin.google.com/ac/owl/settings
admin.google.com
https://redcanary.com/cybersecurity-101/threats/what-is-threat-hunting/
redcanary.com
https://sites.google.com/view/gam--commands/services/tokens
sites.google.com
https://support.google.com/a/answer/2984349?hl=en
support.google.com