This would prompt the victims to enter their email and password for Azure at which point the attackers steal them, gaining access to their cloud environments. "We verified that the phishing ...

He said Windows 365 failed to stop Mimikatz from extracting the Microsoft Azure email address and passwords, in plaintext, for logged-in users. The exploit took advantage of another security bug ...