Attackers move on new CEOs, using transition confusion to harvest Microsoft credentials.
Source: Threadpost