Rogue external MFA providers can steal passwords during logins https://www.bleepingcomputer.com/news/security/rogue-external-mfa-providers-can-steal-passwords-during-logins/