OAuth applications to deploy VMs for cryptomining (Campaign)
ID: e6bfb74a-3d6a-50b8-b5d3-da2a1b216049
STIX ID: report--e6bfb74a-3d6a-50b8-b5d3-da2a1b216049
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2023-12-12
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
Microsoft reports that threat actors are abusing OAuth applications to automate financially motivated attacks, leveraging OAuth app misuse to scale fraudulent activity. The post summarizes attacker behavior and provides guidance for detection and mitigation to reduce the risk of automated financial fraud stemming from OAuth abuse.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.