Microsoft researchers: OAuth app used to automate phishing attacks and mine cryptocurrency
Microsoft researchers have discovered a series of cyber attacks where OAuth applications are used to automatically conduct phishing attacks, disrupt company emails, and secretly mine cryptocurrency. The hackers' targets are accounts that lack strong authentication mechanisms. They create new OAuth applications with high permissions through hijacked accounts, allowing malware to access systems without the user's knowledge.
In one case, an attacker with the username Storm-1283 used OAuth to deploy virtual machines for cryptocurrency mining. Depending on the duration of the attack, losses ranged from $10,000 to $1.5 million.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Warren Buffett’s Crypto Gift from Justin Sun Surges 1,000% in Value by 2024
![](https://img.bitgetimg.com/multiLang/image/social/d7215344ad2c6159afe786d833a13f3a1725746405107.jpg)
Roblox will allow devs to skip Robux and charge players in fiat money
VanEck’s Matthew Sigel Defends Ethereum’s Strong Utility Despite Bearish Market
![](https://img.bitgetimg.com/multiLang/image/social/e201343e99422f1587dcca6032544c281725741543205.jpg)
How Solana is Surpassing Ethereum in Blockchain Performance
![](https://img.bitgetimg.com/multiLang/image/social/19c85f4faba5949f3815555cb0a7c7711725741542820.jpg)