OAuth apps used in cryptocurrency mining, phishing campaigns, and BEC attacks

Microsoft warns that threat actors are using OAuth applications cryptocurrency mining campaigns and phishing attacks. Threat actors are using OAuth applications such as an automation tool in cryptocurrency mining campaigns and other financially motivated attacks. The attackers compromise user accounts to create, modify, and grant high privileges to OAuth applications to carry out malicious activity […]

accounts applications apps attackers attacks automation bec bec attacks breaking news campaigns compromise cryptocurrency cryptocurrency mining cyber crime grant hacking high information security news it information security microsoft mining oauth password spraying phishing phishing attacks phishing campaigns pierluigi paganini privileges storm-1283 threat threat actors tool