TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Proofpoint disclosed an active TeamFiltration campaign, UNK_CondorFiltration, targeting over 5,700 accounts across 28 Microsoft 365 tenants, primarily Chilean retail and financial firms. The attacks originated from 1,487 AWS EC2 IP addresses and compromised seven accounts, likely using default passwords to gain initial access.