ToddyCat and Umbrij: When OAuth Becomes the New Target of APT Campaigns

Overview The recent campaign recorded by the APT ToddyCat group targets businesses using the Google Workspace (Gmail) email service. By using a specialized tool called Umbrij, attackers do not try to