When Apps Attack: Hunting Traitorware and Rogue Microsoft 365 Apps at Scale

Apps are not always your friend! In the Azure ecosystem, applications are a core part of the end-user experience. But when these apps go rogue, what kinds of havoc ensues? How are applications leveraged by attackers to persist, infect, and bypass MFA? More importantly, how do we hunt these rogue apps down at scale? 

In this episode of Tradecraft Tuesday, we’re diving into the hidden dangers lurking in your Microsoft 365 and Azure environments. 

Join us as we break down app-based attacks like traitorware and rogue OAuth apps—and after covering the technical aspects of these attacks and how they exploit the Azure ecosystem, we’ll talk about how to tackle them head-on and hunt them down at scale.