Money-grubbing crooks abuse OAuth – and baffling absence of MFA – to do financial crimes

Business email compromise, illicit cryptomining, phishing … if it makes a dollar, this lot do it

Multiple miscreants are misusing OAuth to automate financially motivated cyber crimes – such as business email compromise (BEC), phishing, large-scale spamming campaigns – and deploying virtual machines to illicitly mine for cryptocurrencies, according to Microsoft.…

This article has been indexed from The Register – Security

Read the original article: