New ConsentFix attack hijacks Microsoft accounts via Azure CLI A new variation of the ClickFix dubbed \'ConsentFix\' abuses OAuth app to hijack without need for a password or bypass multi-factor authentication (MFA) verifications.