New version of Exmatter, and Eamfo malware, used by attackers deploying the Rust-based ransomware.
Microsoft discovered an attack where attackers installed a malicious OAuth application in compromised tenants and used their Exchange Online service to launch spam runs.