Microsoft Self-Service Password Reset abused in Azure data theft attacks
…To make the ruse more convincing, the hacker poses as an IT support employee requiring urgent verification of the account. The hacker then reset the password, removed the MFA controls, and enrolled…