silversurfer

Level 46
Content Creator
Trusted
Malware Hunter
Verified
Massive IMAP-based password-spraying attacks successfully breached Microsoft Office 365 and G Suite accounts protected with multi-factor authentication (MFA) according to an analysis by Proofpoint.

This technique takes advantage of the fact that the legacy authentication IMAP protocol bypasses MFA, allowing malicious actors to perform credential stuffing attacks against assets that would have been otherwise protected.

As noted by Proofpoint's Information Protection Research Team in a recent report, during a "recent six-month study of major cloud service tenants, Proofpoint researchers observed massive attacks leveraging legacy protocols and credential dumps to increase the speed and effectiveness of brute force account compromises at scale."
 

shmu26

Level 74
Content Creator
Trusted
Verified
This is a targeted attack on organizations. The hackers have to work pretty hard to brute-force their way in, but they have a lot of success in the end. Although it does sound pretty dismal, I don't think it threatens home users.
 

JM Safe

From Zemana
Verified
Well, multi-factor authentication is one of the safest ways nowadays to perform login operations (a lot of websites and applications use it), so if hackers and malcoders could manage to break it, it would be very urgent to improve it as soon as possible, lately cyber attacks are aiming to steal credentials and accounts, see for example Collection #1 attack. Also, it's great in my opinion to check sometimes our accounts emails on Have I Been Pwned: Check if your email has been compromised in a data breach