Voice Callers Exploit BYOD to Reach Microsoft 365 Data

Threat actors use Microsoft's Graph API to find targets, then pass access to extortion groups like ShinyHunters. BYOD devices are exploited to reach Microsoft 365 and corporate data.