Checking for malicious OAuth apps As Office 365 OAuth apps can give attackers complete access to an Office 365 account, they can be used for a variety of attacks.