Microsoft observed phishing-led exploitation of OAuth’s by-design redirection mechanisms. The activity targets government and ...