Token Spraying: Microsoft 365 attack across 79 organizations
🔗 https://cybersecurefox.com/en/token-spraying-microsoft-365-replay-attack
#token #replay #Microsoft #365 #AitM #token #spraying #Entra #ID
CyberSecureFoxToken Spraying: Microsoft 365 Attack Across 79 OrganizationsThe attack infrastructure was split into two tiers: AitM relays used to intercept sessions, and separate hosts for token replay. Replay activity originated