Token replay campaign breaches Microsoft 365 accounts at 79 organisations

Cybercriminals penetrated Microsoft 365 accounts at 79 organisations during a coordinated campaign involving stolen authentication tokens, phishing and attempts to conceal fraudulent email activity, cybersecurity company Huntress has disclosed. The investigation, published on October 22, identified at least 497 successful sign-ins and more than 200,000 failed login attempts between July 14 and September 22. Researchers said attackers reused legitimate sessions captured through deceptive authentication processes, enabling access […] The article Token replay campaign breaches Microsoft 365 accounts at 79 organisations appeared first on Arabian Post.