LSHIY: Large-Scale Password Spraying Abusing ROPC and IPv6 1. Basic...
LSHIY: Large-Scale Password Spraying Abusing ROPC and IPv6
1. Basic Information
Article Title: How the LSHIY Password-Spraying Attack Abuses OAuth’s ROPC Grant
Publisher: Huntress
Publish Date: 2026-08-19
Huntress says attackers made 81M Azure CLI password spray attempts from June 12-26, 2026, using ROPC to bypass weak CAPs.
Threat actors have made over 81 million login attempts in a massive password spray campaign targeting Azure CLI.
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering…
ShinyHunters takes the credit and gives developer an F for security
An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over…
Password spraying is a type of account takeover (ATO) attack in which cybercriminals test one or a...
