Coinbase Impersonators Are After Your Microsoft 365 Account

[Galaxy]

Malicious actors are spoofing known crypto brands as cryptocurrency adoption gains increasing traction among mainstream consumers. A new wave of phishing emails is targeting Microsoft 365 accounts by masquerading as major cryptocurrency exchange Coinbase.

According to a report published by BleepingComputer this week, phishing emails are presented as notifications from Coinbase, informing users about the exchange’s "New terms of service" that they allegedly must read and accept. The hackers ask users to authorize a modified consent app—a version of the legitimate Office 365 application that gives third parties access to email accounts.
Info link: https://decrypt.co/45905/coinbase-impersonators-are-after-your-microsoft-365-account