Ghost Service Accounts Enable M365 Data Theft in Chile

A threat actor, tracked as UNK_CondorFiltration, has been targeting Chilean organizations using a tactic called TeamFiltration to steal data by exploiting forgotten service accounts in Microsoft 365. The Proofpoint research team recommends organizations inventory their existing accounts and implement a process to tie every cloud account to a human employee to mitigate this risk.