Skip to main content
عربي
logo

NCSC-TAD-2110-004

Severity Level: Low
Threat

Reference No.: NCSC-TAD-2110-004CVSS 0

DEV-0343 Operating Against the US and Middle East

Threat Type:
N/A
TLP:
CLEAR
CVE:
N/A

Overview

An Iranian threat group known as DEV-0343 is targeting more than 250 Office 365 tenants in United States and Middle East by password spraying attacks.

Mitigation and Immediate Actions

  1. 01

    Enable Multifactor Authentication (MFA).

  2. 02

    Using passwordless solutions like Microsoft Authenticator.

  3. 03

    Review and enforce recommended Exchange Online access policies

  4. 04

    Block ActiveSync clients from bypassing Conditional Access policies.

  5. 05

    Block all incoming traffic from anonymizing services.

References