Microsoft-Verified OAuth Apps Used to Infiltrate Inboxes

Proofpoint Says Campaign Targeted UK Businesses With Malicious Authentication Apps
Cybercriminals exploited the verification process for Microsoft-certified authentication apps to obtain access to the inboxes of financial and marketing companies. Among the permissions threat actors sought were access to emails and calendars, says cybersecurity firm Proofpoint.

access apps authentication businesses campaign certified companies cybersecurity emails exploited financial malicious marketing microsoft oauth permissions process proofpoint threat threat actors uk businesses verification verified