CoPhish: Copilot Studio Phishing Platform Abuse
Date: 2025-11
Affected: Microsoft Copilot Studio
Attack vector: tool-abuse
Category: research
Severity: High

BlackFog documented CoPhish: turning Microsoft Copilot Studio into a phishing platform - attackers create public agents that exfiltrate user data via OAuth flows tied to Microsoft trusted domains.


Mitigations:

Architectural layers (MAESTRO):