Security News > 2025 > February > Botnet targets Basic Auth in Microsoft 365 password spray attacks

2025-02-24 17:49
A massive botnet of over 130,000 compromised devices is conducting password-spray attacks against Microsoft 365 (M365) accounts worldwide, attempting to confirm credentials. [...]
News URL
Related news
- Massive botnet hits Microsoft 365 accounts (source)
- Hidden Threats: How Microsoft 365 Backups Store Risks for Future Attacks (source)
- Microsoft links recent Microsoft 365 outage to buggy update (source)
- New ClickFix attack deploys Havoc C2 via Microsoft Sharepoint (source)
- New Microsoft 365 outage impacts Teams, causes call failures (source)
- New Eleven11bot botnet infects 86,000 devices for DDoS attacks (source)
- Microsoft 365 apps will prompt users to back up files in OneDrive (source)
- Unpatched Edimax IP camera flaw actively exploited in botnet attacks (source)
- Malicious Adobe, DocuSign OAuth apps target Microsoft 365 accounts (source)
- Unpatched Edimax Camera Flaw Exploited for Mirai Botnet Attacks Since Last Year (source)