TokenPost·
Storm-0940 Tried to Access More Than 2,250 Microsoft 365 Tenants
2 outlets reporting
2,250
Microsoft 365 tenants
The group used compromised ConnectWise Cloud Backup application credentials. Activity in multiple customer environments went beyond attempted sign-ins.