threat-intel
Massive Password Spray Campaign Targeting Azure CLI
High
Summary
A massive password spray campaign targeting Microsoft 365 environments, specifically the Azure CLI, was observed by Huntress. The attacks, originating from AS32167 and linked to LSHIY LLC, resulted in the compromise of over 81 million login attempts and 78 user accounts across 64 organizations. This campaign highlights vulnerabilities in MFA configurations and the reliance on outdated authentication flows.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data