OAuth used to gain control of Exchange servers and spread spam, Microsoft says

Microsoft recently detailed on its security blog an attack where malicious OAuth applications were used to compromise cloud tenants to gain control of Exchange Online settings to eventually spread spam.

cloud security control email security exchange microsoft oauth servers spam