As cited
Copy frozen at (site build).
breaches incidents
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
Security researchers have documented widespread token-spraying attacks targeting Microsoft 365 accounts as part of a business email compromise (BEC) campaign. The attacks use phishing, stolen session tokens, and social engineering to gain access to corporate networks. Attackers attempt to compromise accounts to facilitate email-based fraud and lateral movement within organizations.
Why it matters: Organizations using Microsoft 365 face direct risk of account compromise and business email compromise attacks; security teams should review session token handling, implement strong multifactor authentication (MFA), and monitor for suspicious access patterns.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
breaches incidents
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
Security researchers have documented widespread token-spraying attacks targeting Microsoft 365 accounts as part of a business email compromise (BEC) campaign. The attacks use phishing, stolen session tokens, and social engineering to gain access to corporate networks. Attackers attempt to compromise accounts to facilitate email-based fraud and lateral movement within organizations.
Why it matters: Organizations using Microsoft 365 face direct risk of account compromise and business email compromise attacks; security teams should review session token handling, implement strong multifactor authentication (MFA), and monitor for suspicious access patterns.
- Source published
- First seen by Cybersecurity Tracker