‘Tis the Season of Harvesting Office 365 Credentials | Cyware Hacker News

The hacking group TA2552 was uncovered employing OAuth2 and other token-centered authorization strategies to obtain access to Business office 365 accounts to steal credentials.