Microsoft removed 18 Azure AD apps used by Chinese state-sponsored hacker group