At this stage, it’s just a case of using the self service password reset operation for Okta or Entra (which you can get all around since you now have the MFA component to validate oneself) and voila, the attacker has taken Charge of the account.  You received’t get a ton of deliv