APT29 Attack Path Explained #shorts

At the end of the day, the attack path is very very straightforward. Okay. So, a29 uh got access uh by password spraying um a legacy test account in their legacy test tenant. Again, the words here are very very important because uh I'm sure that many uh people went over this uh document in order to save any trouble for Microsoft. But again uh a legacy test account got compromised then but somehow it got an ownership over a legacy of application and that application as a an identity inside Microsoft own cooperate tenant and maybe this connection uh might seem a bit I don't know unclear how they move from one tenant to another. So let me just uh elaborate a bit on