Scam looks to trick users into authorizing a malicious web app and give it keys to your Microsoft 365 kingdom.