Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

Threat actors are using the Microsoft Graph API to identify potential targets, and then selling access to these targets to extortion groups. This exploitation allows attackers to reach Microsoft 365 and corporate data, taking advantage of bring-your-own-device policies. The access is being passed to groups such as ShinyHunters, who likely use it for malicious purposes.