Threat Actors Impersonating Microsoft OAuth Applications to Steal Login Credentials

A sophisticated phishing campaign exploiting Microsoft OAuth applications has emerged as a significant threat to enterprise security, with cybercriminals successfully bypassing multifactor authentication systems to steal user credentials. The campaign, which began in early 2025 and remains ongoing, leverages fake Microsoft 365 applications that impersonate legitimate enterprise services including RingCentral, SharePoint, Adobe, and DocuSign to […]

The post Threat Actors Impersonating Microsoft OAuth Applications to Steal Login Credentials appeared first on Cyber Security News.