O365 email account compromised despite MFA

Hi all, So one of my users clicked on a link in a suspicious email. A few days later emails were being sent out to all contacts from their account. Azure sign-in logs showed that access was from a ...