For example, inside the 2023 MGM attack, the attacker instantly accessed an account with Super Admin permissions in Okta, which they combined with an inbound federation attack to impersonate any person in the tenant, get Azure admin privileges, and authenticate towards the Azure-hosted VMware atmosphere the place they deployed ransomware. Find USB