Microsoft Entra TrustSink Attack Uses Rogue MFA Provider to Steal Passwords

TrustSink, a post-compromise credential-phishing technique that abuses Microsoft Entra External Authentication Methods (EAMs) to place a rogue password promp...