Microsoft plans to require multi-factor authentication for Cloud Solution Providers (CSPs) due to an increase in phishing and malware attacks.