Security researchers at Huntress identified a global campaign targeting Microsoft 365 environments, making over 200,000 login attempts with 497 successful sign-ins.
The vulnerability or weakness
The attackers used stolen session tokens to gain initial access, allowing them to bypass multi-factor authentication and maintain persistence.
Earlier attacks and coverage
Business impact
Organizations faced significant operational disruptions and potential data breaches, impacting their reputation and potentially leading to financial losses.
Industries affected
The attacks affected a wide range of industries, including finance, healthcare, and technology.
Users affected
Corporate users were targeted, with their Microsoft 365 accounts potentially compromised, leading to unauthorized access and data manipulation.
Build these skills
Sources
- Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise (Infosecurity Magazine)
