Malicious Adobe, DocuSign OAuth Apps Steal Microsoft 365 Account Credentials

The phishing emails targeted multiple US and European industries, including government, healthcare, supply chain, and retail. Some of the emails seen by Proofpoint use RFPs and contract lures to trick recipients into opening the links.