Spear-Phishers Leverage Office 365 Ecosystem to Validate Stolen Creds in Real Time