New.
The attacks targeted more than 5,700 accounts across 28 Microsoft 365 tenants in Latin America.
"All 7 successfully compromised accounts were unmanaged functional/service accounts with no prior legitimate login baseline, strongly indicating default or predictable passwords that had never been rotated, with no MFA enforcement."
Proofpoint: Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts https://www.proofpoint.com/us/blog/threat-insight/Spraying-in-the-Andes-TeamFiltration-Returns #infosec #threatresearch #Microsoft
ProofpointSpraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts | Proofpoint USKey Takeaways Proofpoint researchers identified an active TeamFiltration campaign - tracked as UNK_CondorFiltration, that targeted over 5,700 accounts across 28 Microsoft 365 tenants in