Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.