Security
Malicious OAuth applications used to compromise Microsoft Exchange servers
By Duncan Riley
Microsoft Corp. researchers today detailed a recent attack involving malicious OAuth applications that were deployed on compromised cloud tenants to control Exchange servers and spread spam. The threat actor launched credential-stuffing attacks against high-risk accounts…
