M365 Token Spray and Replay Campaign Compromises Business Email Accounts
Huntress has tracked a 10-week Microsoft 365 campaign pairing adversary-in-the-middle relays with token replay, rogue Entra devices, MFA tampering and hidden inbox rules. The campaign compromises business email accounts. https://www.huntress.com/blog/token-replay-spray
HuntressM365 Token Spray and Replay Campaign Compromises Business Email Accounts | HuntressHuntress tracked a 10-week Microsoft 365 campaign pairing AiTM relays with token replay, rogue Entra devices, MFA tampering, and hidden inbox rules.