Recent Comments

    Blogroll

    Search

    Multi-Factor Bypassed (Office 365 and G Suite)?

    March 16th, 2019 by

    Multi-Factor Auth Bypassed in Office 365 and G Suite IMAP Attacks

    “Massive IMAP-based password-spraying attacks successfully breached Microsoft Office 365 and G Suite accounts, circumventing multi-factor authentication (MFA) according to an analysis by Proofpoint.

    This technique takes advantage of the fact that the legacy authentication IMAP protocol bypasses MFA, allowing malicious actors to perform credential stuffing attacks against assets that would have been otherwise protected.”

    Posted in Security Breeches | No Comments »



    Leave a Reply