An account-connection page is a workflow screen that asks a user to link, authorize, or grant access to an online account or service. It often appears during legitimate business integrations, such as connecting an advertising account, cloud app, or identity provider, so users may treat it as routine rather than suspicious.
In cyber attacks, this kind of page is valuable because it can hide phishing inside a normal-looking permission flow. Instead of stealing a password on a classic login form, an attacker may copy the structure of an authorization screen, prompt for consent, or guide the victim through a fake integration step. This can help capture credentials, session tokens, or dangerous app permissions. Defenders should verify the domain, inspect consent scopes, and prefer phishing-resistant MFA such as passkeys or hardware security keys, which are harder to abuse during live workflow attacks.