Attackers abuse Microsoft’s 'verified publisher' status to steal data
OAuth is an open authentication standard used by Microsoft and other major tech players – including Amazon, Google, and Facebook – to enable users to share information about their accounts with third-party applications or websites. Microsoft gives an app publisher a"verified publisher" status when their identity has been verified using the MCPP .
that researchers investigated an attack where malicious OAuth applications were deployed on compromised cloud tenants and used to control Exchange Online settings and spread spam.various techniques attackers used to launch malicious OAuth applications that relied on Microsoft's platform. The miscreants used several tactics to impersonate legitimate organizations, including displaying a name that looked similar but ever so slightly different to that of an existing legitimate publisher.
These malicious verified publishers also have impersonated popular applications by using icons that look like the legitimate apps, similar names, and"reply to" URLs.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
JD Sports admits 10 million customers' data accessedNo payment details exposed in breach, says retailer, but shoppers told to be 'vigilant about potential scams'
Read more »
Lancashire Constabulary among worst forces for police data breaches in EnglandResearch shows the force had one suspected breach every 76 minutes
Read more »
Data-driven algorithm predicts deep brain stimulation parameters for Parkinson’s treatmentData-driven algorithm predicts deep brain stimulation parameters for Parkinson’s treatment ChariteBerlin TheLancet Algorithm DeepBrainStimulation ParkinsonsTreatment
Read more »
How Brexit has changed travel to Europe, from passport rules to data roamingThree years on from our departure from the EU, UK travellers face more delays and paperwork when travelling to Europe – and 2023 will bring new checks
Read more »
Experts warn over vaping packagingOne Nottinghamshire headteacher has spoken out after NHS data suggests vaping among secondary school children is on the rise
Read more »