The researchers simplified in the following diagram the attack flow targeting users by ... and the attacker used the "stolen OAuth authorization code to register a new device to the victim ...