Threat actors launch financially motivated attacks abusing OAuth applications

Microsoft researchers say threat actors abused OAuth to deploy VMs for cryptomining, establish persistence following BEC attacks, and launch spamming activity.

abusing applications application security attacks bec bec attacks cryptomining deploy identity launch microsoft oauth persistence researchers spamming threat threat actors vms