How it works: Attackers trick employees at companies using Microsoft's Active Directory Federation Services (ADFS) into handing over login credentials and multi-factor authentication (MFA ...