In a cyber twist, attackers behind two of the campaigns are using the apps to redirect users to phishing and malware distribution sites.
First seen on darkreading.com
Jump to article: www.darkreading.com/application-security/oauth-attacks-target-microsoft-365-github