Microsoft Says Test Account Gave Hackers Keys to the Kingdom

Postmortem: Multiple Customers Also Targeted by Russian Nation-State Attackers
A nation-state hacking group run by Russian intelligence gained access to a Microsoft "legacy, non-production test tenant account" and used it to authorize malicious Office 365 OAuth applications, access Outlook, and steal Microsoft and customers' emails and attachments, Microsoft said.

access account applications attachments authorize customers emails hackers hacking hacking group intelligence keys legacy malicious microsoft nation non oauth office office 365 outlook production run russian state steal test