How the LSHIY Password-Spraying Attack Abuses OAuth’s ROPC Grant

T1Covered by 1 source · first reported by Huntress at 22 Jul, 13:00 UTC

What we learned from tracking a massive automated password spraying campaign on the Azure CLI that leveraged a depreciated OAuth flow.

cloudsecurity

Sources

• T1How the LSHIY Password-Spraying Attack Abuses OAuth’s ROPC GrantHuntress22 Jul, 13:00