I found a reference to this story while examining the new cases on security.microsoft.com and had a funny conversation with Claude about it and then checked to see if hacker news had an entry on it and found none so here is the full report from Oasis security