Coinbase phishing hijacks Microsoft 365 accounts via OAuth app

A new phishing campaign uses a Coinbase-themed email pretending to be a "New terms of service" that prompts users to install an Office 365 consent app that gives attackers access to a victim's email.