Eaton
•
Jan 17, 2024
Key Points / Summary
An Eicher Motors premium calculator website on a Toyota Tsusho Insurance Broker India subdomain exposed Microsoft corporate cloud credentials.
The email sending API returned sending logs to the client, which contained the email account’s password.
The password could be used to log into the “
[email protected]” Microsoft email account. No two-factor authentication was enabled on the account.
The email account had a record of everything they have ev...