---
title: "Why Is Microsoft Warning Users About Password Spraying?"
description: "Microsoft has warned that high-profile defense targets are being sprayed by hackers. We’ll tell you what that means in today’s blog."
url: "https://www.omegatechnicalsolutions.com/blog/why-is-microsoft-warning-users-about-password-spraying"
date: "2026-06-13T21:28:23+00:00"
language: "en-GB"
---
## Omega Technical Solutions Blog
Omega Technical Solutions has been serving the Haymarket area since 2007, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.
[ Categories ](https://www.omegatechnicalsolutions.com/blog/categories "Categories")
[ Tags ](https://www.omegatechnicalsolutions.com/blog/tags "Tags")
[ Categories: All Categories ](https://www.omegatechnicalsolutions.com/javascript:void(0); "Categories")
Search...Suggested keywords
[ x ](https://www.omegatechnicalsolutions.com/javascript:void(0);)
# Why Is Microsoft Warning Users About Password Spraying?
[Security](https://www.omegatechnicalsolutions.com/blog/categories/security) [Omega Technical Solutions Blog](https://www.omegatechnicalsolutions.com/blog/categories/blog)
[Steven Holmes](https://www.omegatechnicalsolutions.com/blog/blogger/steven-holmes)
Friday, 10 December 2021
[ 0 Comments ](https://www.omegatechnicalsolutions.com/blog/why-is-microsoft-warning-users-about-password-spraying#comments)
[  ](//www.omegatechnicalsolutions.com/images/easyblog_shared/December_2021/12-10-21/password_spraying_80058904_400.jpg "Why Is Microsoft Warning Users About Password Spraying?")
As modern warfare has evolved, so too has cyberwarfare. There is always a war occurring in cyberspace, where hackers attempt to outdo security researchers. One such example of hackers—often sponsored by government agencies—attempting to engage in cyberwarfare can be seen in the United States and Israeli technology sectors, which have become the target of password spraying.
Password spraying involves hacking into multiple accounts by spamming commonly used passwords. Considering how frequently people use common passwords, as well as variations of those passwords, on3e can imagine how effective this tactic can be.
In the scenario outlined above, Microsoft has issued a warning that about 250 Microsoft Office 365 customers in the defense technology sectors have been targeted by password spraying tactics. Microsoft calls this group DEV-343, with the DEV in the name representing the fact that the attacks are, at this time, not sponsored by state actors. This group is thought to originate from Iran.
Less than 20 of the targets were actually compromised, but it’s still shocking to see high-profile targets opting for commonly used passwords. Microsoft has also reported that organizations that use multi-factor authentication are at less risk than those that don’t. As reported by Microsoft, security professionals should be wary of suspicious connections enabled by Tor networks: "DEV-0343 conducts extensive password sprays emulating a Firefox browser and using IPs hosted on a Tor proxy network. They are most active between Sunday and Thursday between 7:30 AM and 8:30 PM Iran Time (04:00:00 and 17:00:00 UTC) with significant drop-offs in activity before 7:30 AM and after 8:30 PM Iran Time. They typically target dozens to hundreds of accounts within an organization, depending on the size, and enumerate each account from dozens to thousands of times. On average, between 150 and 1,000+ unique Tor proxy IP addresses are used in attacks against each organization.”
Your business should always be prepared to take a look at traffic on its network—especially if the activity is suspicious in some way, like during off-times when nobody has any reason to be accessing your infrastructure. Passwords are only one part of a cybersecurity strategy, though, and you should be implementing security solutions like multi-factor authentication whenever possible.
COMPANYNAME can help your business keep itself secure from threats of all kinds. To learn more, reach out to us at PHONENUMBER.
[ ](https://www.omegatechnicalsolutions.com/javascript:void(0);) [ ](https://www.omegatechnicalsolutions.com/javascript:void(0);) [ ](https://www.omegatechnicalsolutions.com/javascript:void(0);)
Tags:
[Security](https://www.omegatechnicalsolutions.com/blog/tags/security) [Privacy](https://www.omegatechnicalsolutions.com/blog/tags/privacy) [Authentication](https://www.omegatechnicalsolutions.com/blog/tags/authentication)
[ Do Humans Create Bias in the AI We’ve Developed? ](https://www.omegatechnicalsolutions.com/blog/do-humans-create-bias-in-the-ai-we-ve-developed)
[ Avoiding Network Bottlenecks Can Help Your Busines... ](https://www.omegatechnicalsolutions.com/blog/avoiding-network-bottlenecks-can-help-your-business-be-more-productive)
About the author
[  ](https://www.omegatechnicalsolutions.com/blog/blogger/steven-holmes)
[Steven Holmes](https://www.omegatechnicalsolutions.com/blog/blogger/steven-holmes)
[ ](https://www.omegatechnicalsolutions.com/javascript:void(0); "Subscribe to updates from author") [ ](https://www.omegatechnicalsolutions.com/javascript:void(0);) [ ](https://www.omegatechnicalsolutions.com/blog/blogger/steven-holmes)
Mr. Holmes is responsible for the structure, strategy and execution of Omega Technical Solutions’ team. He also has an extensive background in designing, engineering, and securing Enterprise and Data Center networks.
Author's recent posts
[More posts from author](https://www.omegatechnicalsolutions.com/blog/blogger/steven-holmes)
[ Saturday, 27 June 2026 How to Actually Make a Quiet Day Work for Your Business ](https://www.omegatechnicalsolutions.com/newsletter-content/how-to-actually-make-a-quiet-day-work-for-your-business)
[ Thursday, 25 June 2026 How to Mix Cloud and Office Servers Without Making Your Employees Miserable ](https://www.omegatechnicalsolutions.com/newsletter-content/how-to-mix-cloud-and-office-servers-without-making-your-employees-miserable)
[ Saturday, 20 June 2026 Why Your Tech Strategy Should Focus on Capability, Not Replacement ](https://www.omegatechnicalsolutions.com/newsletter-content/why-your-tech-strategy-should-focus-on-capability-not-replacement)
Comments
No comments made yet. Be the first to submit a comment
**** Already Registered? [Login Here](https://www.omegatechnicalsolutions.com/component/users/login?return=aHR0cHM6Ly93d3cub21lZ2F0ZWNobmljYWxzb2x1dGlvbnMuY29tL2Jsb2cvd2h5LWlzLW1pY3Jvc29mdC13YXJuaW5nLXVzZXJzLWFib3V0LXBhc3N3b3JkLXNwcmF5aW5n&Itemid=101)
Saturday, 13 June 2026
Subscribe to the blog (Please fill in your email address to subscribe to updates from this post.)
**Captcha Image**
## Schema
```json
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"position": 1,
"name": "Home",
"item": "https://www.omegatechnicalsolutions.com"
},
{
"@type": "ListItem",
"position": 2,
"name": "Blog",
"item": "https://www.omegatechnicalsolutions.com/blog"
},
{
"@type": "ListItem",
"position": 3,
"name": "Steven Holmes",
"item": "https://www.omegatechnicalsolutions.com/blog/blogger/steven-holmes"
},
{
"@type": "ListItem",
"position": 4,
"name": "Why Is Microsoft Warning Users About Password Spraying?",
"item": "https://www.omegatechnicalsolutions.com/blog/why-is-microsoft-warning-users-about-password-spraying"
}
]
}
```