Microsoft has revealed details of how the Russian state-sponsored hacking group, Nobelium, gained access to its corporate systems.
The hackers initially used a password spray attack and targeted a non-production test tenant account that did not have two-factor authentication enabled.
Nobelium used their initial access to compromise a legacy test OAuth application, which allowed them to create malicious OAuth applications and access Microsoft's corporate environment.