Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise

Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen session tokens and social engineering