https://github.com/PaloAltoNetworks/Unit42-timely-threat-intel/blob/main/2025-10-23-OAuth-flow-phishing.txt