Glossary
Password Spraying
An attack that tries a small number of commonly used passwords against a large number of different user accounts, rather than many passwords against one account. This low-and-slow approach is designed to stay under the threshold that would trigger typical account-lockout defenses.
Recent coverage mentioning Password Spraying
BREEZE COMET Exploits Brazilian Financial Systems
BREEZE COMET, a financially motivated threat actor, targets Brazilian financial services for fraudulent transfers, leveraging custom malware and AI for development.
Entra Log Analysis: Detecting Password Spray Attacks with PowerShell
Learn to analyze Microsoft Entra sign-in logs using PowerShell to detect password spray attacks and anomalous successful logins from unexpected geographic locations.
Mitigating Large-Scale Credential Attacks and Password Spraying
Analysis of large-scale password spraying and credential theft campaigns targeting enterprise identity perimeters, edge devices, and cloud tenants.
Threat Actor Claims 3.6 Million Azure Account Records Stolen
A threat actor named TheHatman is selling 3.6 million employee records allegedly stolen from major corporate Azure tenants using compromised credentials.
Advertisement