TeamFiltration Campaign Compromises Microsoft 365 Accounts Using Default Passwords

Security researchers have detailed an active attack campaign named UNK_CondorFiltration leveraging the TeamFiltration framework against Microsoft 365 tenants. The threat actors target financial and retail sectors, utilizing AWS infrastructure to perform credential stuffing and brute-force attacks, successfully compromising accounts with default or weak credentials.