Russian Hackers Exploit OAuth 2.0 to Infiltrate Microsoft 365 Accounts in Targeted Campaign

Russian hackers are targeting Ukraine-related organizations and human rights groups by exploiting OAuth 2.0 authentication to compromise Microsoft 365 accounts. Operating since March, threat actors UTA0352 and UTA0355 impersonate European officials, contacting targets via WhatsApp and Sign...