Hackers Abused Microsoft's "Verified Publisher" OAuth Apps to Hack Corporate Email Accounts

Microsoft on Tuesday said it took steps to disable fake Microsoft Partner Network (MPN) accounts that were used for creating malicious OAuth applications as part of a malicious campaign designed to breach organizations' cloud environments and steal email.
"The applications created by these fraudulent actors were then used in a consent phishing campaign, which tricked users into granting

accounts applications apps breach campaign cloud cloud environments consent consent phishing corporate corporate email email environments fake fraudulent hack hackers malicious malicious oauth applications microsoft network oauth organizations partner phishing phishing campaign publisher steal tuesday verified verified publisher