The development represents a growing trend of increasingly sophisticated authentication bypass attacks, including the major OAuth phishing campaign that targeted Microsoft 365 users in late 2024.