
In a concerning new development in the cybersecurity landscape, a massive Chinese botnet is currently targeting Microsoft 365 (M365) accounts through sophisticated password spraying attacks, effectively bypassing Multifactor Authentication (MFA). The botnet, which SecurityScorecard has identified as comprising over 130,000 compromised devices, is using stolen credentials from infostealer accounts to gain access to sensitive data, emails, and collaboration tools. These