Money-grubbing crooks abuse OAuth – and baffling absence of MFA – to do financial crimesJessica Lyons Hardcastleon December 14, 2023 at 11:03 The Register
Business email compromise, illicit cryptomining, phishing … if it makes a dollar, this lot do it
Multiple miscreants are misusing OAuth to automate financially motivated cyber crimes – such as business email compromise (BEC), phishing, large-scale spamming campaigns – and deploying virtual machines to illicitly mine for cryptocurrencies, according to Microsoft.…