Russia-linked Cozy Bear Uses Evasive Techniques to Target Microsoft 365 Users

The researchers also reported another trend where multiple threat actors, including the APT29 group, are taking advantage of the self-enrollment process for MFA in Azure Active Directory and other platforms.