A new attack framework, ConsentFix v3, has emerged on dark-web forums, specializing in the automated abuse of OAuth consent flows within Azure environments. Unlike previous iterations, v3 incorporates advanced scaling mechanisms that allow attackers to generate thousands of malicious 'Enterprise Applications' and lure users into granting excessive permissions. This technique bypasses traditional MFA, as the 'infection' occurs at the identity provider level rather than the device level. Once consent is granted, the attacker maintains persistent access to M365 data, including emails, SharePoint files, and Teams chats, without needing to re-authenticate. This represents a significant escalation in cloud-native threat tactics, shifting the focus from credential theft to permission subversion.