ConsentFix is a new OAuth phishing technique that abuses browser-based authorization flows to hijack Microsoft accounts. Push Security provides insights from continued tracking and community research into this evolving attack method. The technique represents a sophisticated approach to account takeover through OAuth abuse. Attackers are continuing to evolve their techniques as the campaign progresses. The attack specifically targets Microsoft account credentials through authorization flow manipulation.