Microsoft 365 accounts are under attack from new malware spoofing popular work apps

A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system.

---

• Criminals are using stolen email addresses to distribute malicious OAuth Apps
• These apps steal sensitive data and redirect people to phishing pages
• The pages steal login credentials and deliver malware