Forum Discussion

JasonCohen1892's avatar
Oct 11, 2021

New Blog Post | Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors - Microsoft Security Blog

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center (MSTIC) first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on US and Israeli defense technology companies, Persian Gulf ports of entry, or global maritime transportation companies with business presence in the Middle East. Less than 20 of the targeted tenants were successfully compromised, but DEV-0343 continues to evolve their techniques to refine its attacks. MSTIC noted that Office 365 accounts with multifactor authentication (MFA) enabled are resilient against password sprays.

No RepliesBe the first to reply

Resources