Covered by 2 outlets — first reported by Infosecurity Magazine, Oct 23, 10:30 UTC
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
MentionsMicrosoftMicrosoft 365
In brief
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 sign-in events across
From The Hacker News's coverage.
Continue reading
2 outlets, in the order they reported it.
Infosecurity MagazineFirst report
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen session tokens and social engineering
The Hacker News
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79…
Explained
The technology and terms in this story. Learn more