SS-NEWS-081: Malicious OAuth Apps and Poor Crypto Returns

Episode 81 October 10, 2022 00:29:18
SS-NEWS-081: Malicious OAuth Apps and Poor Crypto Returns
Security Serengeti
SS-NEWS-081: Malicious OAuth Apps and Poor Crypto Returns

Oct 10 2022 | 00:29:18

/

Show Notes

Malicious OAuth apps are coming for your Exchange admins!  Oh noes!  Also, Powerpoint gets in the malware delivery game and it turns out that hackers are not considering the efficiency of spinning up AWS boxes to run cryptominers.  Not very considerate of them.  David has a particularly nasty twist on the Powerpoint one.  

Article 1 - Exchange servers abused for spam through malicious OAuth applications
Supporting Article:
OAuth app policies

Article 2 - Hackers Using PowerPoint Mouseover Trick to Infect Systems with Malware

Article 3 - Cryptominers hijack $53 worth of system resources to earn $1
Supporting Article:
Configure Amazon EC2 Dedicated Hosts

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

Other Episodes

Episode 14

June 13, 2021 00:39:28
Episode Cover

SS-NEWS-014: NDA's Expire in RSA Breach

In this episode we discuss the Wired Article on the RSA Breach of 2011.  The NDA's have expired, and the full story has come...

Listen

Episode 93

January 09, 2023 00:28:34
Episode Cover

SS-RPRT-093: Security Analytics Platforms Surfing the Wave

A security analytics platform is usually central to many companies security monitoring strategy.  Forrester released a new Wave that discusses the current landscape and...

Listen

Episode 49

February 21, 2022 00:52:40
Episode Cover

SS-NEWS-049: Facial Recognition and Billions in Crypto recovered

In this episode, we go deep down the paranoid rabbit hole to discuss what the government would do with facial recognition technology, and we...

Listen