Rogue external MFA providers can steal passwords during logins
Varonis Threat Labs demonstrated TrustSink, a post-compromise technique in which an attacker controlling a highly privileged Microsoft Entra account registers a rogue external MFA…
PRODUCT
Microsoft Entra
- First reported
- Sep 22, 2026
- Last reported
- Sep 22, 2026
- Articles
- 1
Related articles