[New RogueApp]: (Foxmail)

[randomaccess3]

⚠️ Please include as much detail as possible. Please do not submit any private, sensitive, and/or proprietary information.

• Contributor Name: Phill Moore/Randomaccess3
• RogueApp Name: Foxmail
• RogueApp ID: 231575bc-9f6c-4539-9241-5cfae696b630
• RogueApp Description: Email client
• App Owner Organization ID: [the ID of the organization that owns the RogueApp]
• App Publisher Name: [the name of the publisher of the RogueApp]
• App Publisher ID: [the ID of the publisher of the RogueApp]
• Permissions: offline_access, openid, email, profile, POP.AccessAsUser.All, IMAP.AccessAsUser.All, SMTP.Send, EAS.AccessAsUser.All, EWS.AccessAsUser.All - delegtaed
• Tags: BEC
• MITRE ATT&CK IDs: [any applicable MITRE ATT&CK IDs. Comma separated]
• References: [References for the observed TTPs for the RogueApp. We require writeups on the specific adversary tactics for any submitted RogueApp. References can also include the official application documentation.]
• Date Added:

Reference

Seen in casework