ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The ToddyCat group has launched a new malware named Umbrij that stealthily infiltrates Gmail accounts by exploiting the Google API through OAuth. This campaign zeroes in on corporate email communications hosted on Gmail, aiming to compromise access through these APIs. Kaspersky's report highlights the severity of this threat, underscoring the increasing sophistication of cyber-attacks targeting corporate communications. With Umbrij, attackers can covertly access sensitive business emails, making it crucial for organizations to bolster their security protocols and vigilance against such advanced threats.