Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise

Source: Infosecurity Magazine

Published Oct 23, 2026 (UTC)

Read original source

At a glance

Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen session tokens and social engineering