Why MFA matters: These attackers cracked admin accounts then used Exchange to send spam

None of the accounts broken into had MFA enabled, which could have stopped the attack from progressing so fast.