Identity Provider (IdP) token theft is a growing tactic in todays phishing attacks. Token theft can happen in many ways but a common real world method is token theft through a phishing email/site. Here I will map out the attack chain that I've seen and become familiar

Windows Virtualization-based Security (VBS) is a security integration that uses virtualization to enhance your device's security. It utilizes Windows hypervisor to create a virtual environment for security features to operate in isolated sections of the operating system. With this feature, the trust boundaries of your computer are changed.

Recently, there have been many data breaches exposing Personally Identifiable Information (PII), making it likely that your full name, email address, home address, phone numbers, credit card numbers, and Social Security Numbers (SSN) are now circulating on the dark web. This information is just waiting for a bad actor to