Iran-Linked Hackers Launch Password Spray Campaign Against Microsoft 365 Tenants in Middle East

Summary of the Article: Iran-Linked Hackers Launch Password Spray Campaign Against Microsoft 365 Tenants in Middle East

Key Points:

1. Attack Details: A report by Check Point Research reveals that hackers linked to Iran have been conducting a widespread password spray attack targeting Microsoft 365 tenants across the Middle East.

2. Target Focus: The primary targets are Israeli municipalities, but government, energy, and private-sector organizations were also affected.

3. Attack Methodology:

   • Hackers use brute force techniques to guess passwords.
   • They employ a large number of IP addresses from various countries (e.g., Iran, Turkey) to avoid detection.
   • The attacks are characterized by multiple failed login attempts across different accounts from the same source.

4. Impact:

   • Successful breaches allow attackers to gain access to sensitive cloud information and personal email content without triggering typical security alerts associated with malware or destructive actions.
   • This method is particularly insidious because it leverages a single weak password to compromise entire cloud workspaces.

5. Recommendations:

   • Monitor sign-in logs for multiple failed attempts from the same source.
   • Implement location-based access controls and block Tor

Read the full article at Cyber Security News

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.