KeyStealth Hid in a Microsoft 365 Inbox for Seven Weeks, MFA and All
ADAMnetworks details how a device code phishing kit let an operator register rogue Entra devices, sit in a company's Microsoft 365 account for seven weeks and attempt payment fraud.