TeamFiltration Pentesting Tool Harnessed in Global Microsoft Entra ID Attack Campaign

Hackers Weaponize TeamFiltration: Open-Source Pentest Tool Powers Major Entra ID Account Takeover Wave

What began as a legitimate penetration testing framework has now become the centerpiece of a sprawling campaign compromising tens of thousands of enterprise cloud accounts. In a recently disclosed report, Proofpoint researchers unveiled UNK_SneakyStrike—a large-scale, stealthy attack series exploiting the open-source tool TeamFiltration to infiltrate Microsoft Entra ID environments.The campaign, active since December 2024, has already targeted m…

TeamFiltration pentesting tool harnessed in global Microsoft Entra ID attack campaign

Attacks exploiting the TeamFiltration penetration testing framework have been launched by the threat actor UNK_SneakyStrike to target over 80,000 Microsoft Entra ID accounts across hundreds of organizations worldwide, some of which were successfully taken over, as part of a campaign that commenced in December, BleepingComputer reports. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon …