Threat actors launched financially motivated attacks using automated phishing and password-spraying attacks to compromise user accounts that did not have strong authentication mechanisms and had permissions to create or modify OAuth apps, according to Microsoft Threat Intelligence. In a blog post Dec.

Source: SC Magazine