TrustSink attack abuses Microsoft Entra ID to steal credentials

TrustSink is an attack technique that abuses Microsoft Entra ID’s federated trust model by using a rogue MFA provider to intercept user credentials during legitimate login attempts.