The threat actors are exploiting non-interactive sign-ins, an authentication feature that security teams don’t typically monitor.
First seen on darkreading.com
Jump to article: www.darkreading.com/cyberattacks-data-breaches/microsoft-365-accounts-sprayed-mega-botnet