TLDR InfoSec · ATTACKS & VULNERABILITIES
MALICIOUS ADOBE, DOCUSIGN OAUTH APPS TARGET MICROSOFT 365 ACCOUNTS
Summary from the TLDR InfoSec newsletter
Proofpoint researchers uncovered a malware campaign using malicious OAuth apps posing as Adobe Drive, Adobe Drive X, Adobe Acrobat, and DocuSign. These apps request minimal benign permissions but redirect users to phishing pages or malware downloads.