Microsoft 365 token spray-and-replay bypasses MFA at 79 orgs
Huntress details a July–September token spray-and-replay campaign that bypassed MFA at 79 organizations using AiTM relays, rogue Entra devices, and hidden inbox rules.
Huntress details a July–September token spray-and-replay campaign that bypassed MFA at 79 organizations using AiTM relays, rogue Entra devices, and hidden inbox rules.