Sneaky Malware Spoofs Work Apps to Steal M365 Logins

🔍 Cyber alert! Microsoft 365 accounts face threats from malware spoofing popular work apps. Experts urge caution with app permissions. Stay informed! #CyberSecurity #TechRadar

1. Cybercriminals use compromised accounts to distribute malicious OAuth apps that imitate popular apps, leading to credential theft and malware distribution.
2. The attacks primarily target various sectors in the US and Europe, requiring users to grant specific permissions that facilitate further phishing attempts.
3. The campaign uses social engineering tactics, like ClickFix, to trick users into downloading malware via deceptive browser prompts.

Techradar: Microsoft 365 accounts are under attack from new malware spoofing popular work apps