TLDR InfoSec · ATTACKS & VULNERABILITIES

MALICIOUS ADOBE, DOCUSIGN OAUTH APPS TARGET MICROSOFT 365 ACCOUNTS

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

Proofpoint researchers uncovered a malware campaign using malicious OAuth apps posing as Adobe Drive, Adobe Drive X, Adobe Acrobat, and DocuSign. These apps request minimal benign permissions but redirect users to phishing pages or malware downloads.