Science & Tech · Cybersecurity · 4 hrs ago
Password spraying campaign targeted Microsoft 365 accounts at over 300 organizations
Check Point Research identified an Iranian-backed campaign targeting Microsoft 365 accounts at more than 300 organizations.
Password spraying means trying one password against accounts across a large list of users.
The attackers used Tor exit nodes, VPNs and weak credentials to gain unauthorized access.
They accessed sensitive emails and corporate data, showing how password-based attacks can get around some identity security measures.
Complex security rules can be hard for employees to follow, and people may work around protocols they find difficult.
Organizations are urged to strengthen authentication and help employees understand how to protect their accounts.
Both technical controls and employee awareness are needed to reduce the risk of future attacks.
Check Point Research identified an Iranian-backed campaign targeting Microsoft 365 accounts at more than 300 organizations.
The attackers used Tor exit nodes, virtual private networks and weak credentials to gain unauthorized access to sensitive emails and corporate data.
The campaign used password spraying, a technique that tests one password against many accounts.
Industry experts say organizations need stronger authentication and employee awareness to reduce these risks.
- Who
- An Iranian-backed campaign identified by Check Point Research.
- What
- Attackers used password spraying to access Microsoft 365 accounts and sensitive data.
- When
- Not stated.
- Where
- More than 300 organizations; their locations are not stated.
- Why
- The attackers sought unauthorized access to sensitive emails and corporate data.
This story does not have two clearly opposing sides.
This story does not have a timeline yet.
- Targeted service
- Microsoft 365
- Organizations targeted
- More than 300
- Campaign attribution
- Iranian-backed
- Access methods
- Tor exit nodes, virtual private networks and weak credentials