https://github.com/dafthack/MSOLSpray
A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant...
password sprayingmicrosoft onlinegithubtool
https://securityaffairs.com/174595/cyber-crime/large-botnet-targets-m365-password-spraying-attacks.html
A botnet of 130,000+ devices is attacking Microsoft 365 accounts via password-spraying, bypassing MFA by exploiting basic authentication.
password sprayinglargebotnettargetsaccounts