Money-grubbing crooks abuse OAuth apps for BEC, phishing theregister.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from theregister.com Daily Mail and Mail on Sunday newspapers.
After compromising Azure and Outlook user accounts, threat actors use malicious apps with high privileges to conduct crypto-mining, phishing, and password spraying.