MEDIUMVulnerability
Global
Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations
Monday, April 6, 2026 at 06:37 PM UTC·Source: The Hacker News
Updated: Monday, April 6, 2026 at 07:11 PM UTC
Executive Summary
An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E. amid ongoing conflict in the Middle East. The activity, assessed to be ongoing, was carried out in three distinct attack waves that took place on March 3, March 13, and March 23, 2026, per Check Point. "The campaign is primarily
Analysis
An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E. amid ongoing conflict in the Middle East. The activity, assessed to be ongoing, was carried out in three distinct attack waves that took place on March 3, March 13, and March 23, 2026, per Check Point. "The campaign is primarily