ESET published IOCs ↗
- Evidence class
- published ioc
- Source family label
- Not reported
- Source confidence
- Not reported
- Observed
- Not reported
- Retrieved
- 2026-10-08 08:04 UTC
URL https://www.microsoft.com/en-us/security/blog/2022/09/22/malicious-oauth-applications-used-to-compromise-email-servers-and-spread-spam/
Indicator published by the cited source.
Reference details
- Source context
winter_vivern/misp-wintervivern.event.json- First reported
- Not reported
- Last reported
- Not reported
- Catalog updated
- 2026-10-08 08:04 UTC
Published indicators
Network addresses are displayed in defanged form.
URL
hxxps://www[.]microsoft[.]com/en-us/security/blog/2022/09/22/malicious-oauth-applications-used-to-compromise-email-servers-and-spread-spam/