M365 Token Spray and Replay Campaign Compromises Business Email Accounts
Cybersecurity Classified by Officially
Huntress tracked a 10-week Microsoft 365 campaign pairing AiTM relays with token replay, rogue Entra devices, MFA tampering, and hidden inbox rules.
This is an extract. The publication continues at the source.
Read the original at the source: https://www.huntress.com/blog/token-replay-spray
Officially imported this from Huntress’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
Provenance
- Organization
- Huntress — imported from official source
- Official source
- https://www.huntress.com/blog/rss.xml RSS
- Imported
- October 22, 2026 13:02
- Versions
- 1 recorded
- Identity
-
https://www.huntress.com/blog/token-replay-spray