Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Cybersecurity researchers have identified a large-scale automated password spray attack targeting Microsoft's Azure command-line interface. The attack has compromised at least 78 Microsoft accounts after making over 81 million attempts. The malicious activity is originating from an IPv6 address range controlled by LSHIY LLC, an internet infrastructure provider. The attack was observed between June 12 and June 26.