UNK_CondorFiltration Campaign Hits 5,700 Microsoft 365 Accounts

Proofpoint disclosed an active TeamFiltration campaign dubbed UNK_CondorFiltration that targeted over 5,700 accounts across 28 Microsoft 365 tenants, compromising 7 accounts. The activity focused on Chilean retail and financial institutions and originated from 1,487 unique AWS EC2 IP addresses.

• Over 5,700 accounts across 28 Microsoft 365 tenants targeted
• 7 accounts compromised, including via default passwords
• Targets were Chilean retail and financial institutions
• Attacks originated from 1,487 unique AWS EC2 IP addresses