Password-spraying attacks target 80,000 Microsoft Entra ID accounts
The TeamFiltration pentesting platform has been used by hackers to attack over 80,000 Microsoft Entra ID accounts at hundreds of businesses throughout the globe.
According to experts at cybersecurity firm Proofpoint, the effort began in December of last year and has effectively taken over several accounts. They blame the action on a threat actor known as UNK_SneakyStrike.
The campaign peaked on January 8, when it targeted 16,500 accounts in a single day, the researchers said. Days of inactivity preceded such sudden outbursts.
A cross-platform framework called TeamFiltration is used to backdoor, exfiltrate, spray, and count O365 EntraID accounts. Melvin Langvik, a TrustedSec red-team researcher, published it in 2022.
TeamFiltration is essential to enabling extensive infiltratio...