Brute-force attacks launched by cyber-criminals can allow them to compromise corporate e-mail systems such as Office365, steal login credentials, and then use such credentials to read sensitive emails and to send malicious ones to unsuspecting employees

https://www.scmagazineuk.com/hackers-using-brute-force-attacks-infiltrate-e-mail-systems-protected-mfa/article/1488046