Microsoft OWA is a technology platform tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed January 8, 2026; most recent activity January 8, 2026.
Microsoft OWA (Outlook Web App) is a web-based email client for Exchange/Exchange Online, providing browser-based access to corporate mail and calendars. The article highlights a threat campaign by the BlueDelta group targeting Microsoft OWA, Google accounts, and Sophos VPN to steal credentials, illustrating a cross-service credential-theft operation against core authentication surfaces in enterprise environments.
The BlueDelta hacking group, linked to Russian military intelligence, has intensified its credential-stealing efforts throughout 2025. Users of Microsoft Outlook Web Access, Google services, and Sophos VPN have been…