Hackers are using stolen email addresses to distribute malicious OAuth Apps.The apps impersonate popular cloud and productivity apps, such as Adobe Drive and DocuSign.Users who install these apps are prompted to grant specific permissions.Once granted, the apps redirect to phishing landing pages to steal login credentials and deliver malware.