TrustSink abuses Microsoft Entra external MFA providers to inject a fake password prompt, steal credentials during sign-in, and persist until the rogue provider is removed. #TrustSink #MicrosoftEntra #VaronisLabs