🌐 Nation-State Threats

Iran's Hackers Spray Passwords at 300+ Israeli Microsoft 365 Targets—And It's Just Getting Started

Over 300 Israeli organizations got hit by an Iran-backed password-spraying campaign on Microsoft 365. It's sloppy, it's persistent, and it's a reminder that state hackers don't play fair.

Threat Digest Apr 07, 2026 3 min read
Cyber attack map highlighting Iran-linked password spraying on Israeli and UAE Microsoft 365 targets

⚡ Key Takeaways

  • Iran-linked actors password-sprayed 300+ Israeli Microsoft 365 orgs in three 2026 waves. 𝕏
  • Tactics include Tor, VPNs, and mailbox exfil; defenses stress MFA and log monitoring. 𝕏
  • Pay2Key ransomware revives with upgrades, blending crime and state-sponsored hits on enemies. 𝕏
Published by

Threat Digest

Threat intelligence. Zero noise.

#Gray Sandstorm #Iran cyber attacks #Iran cyber threats #Iran hackers #Iranian hackers #Microsoft 365 attacks #Microsoft 365 breach #Pay2Key ransomware #password spraying

Worth sharing?

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by The Hacker News

Related Stories

📬

Stay in the loop

The week's most important stories from Threat Digest, delivered once a week.

No spam. Unsubscribe any time.