Password Spraying Attack

Alternative Forms

• Low and Slow Attack

• Spray-Password Attack

Definitions

Definition 1

Preferred targets:

• Systems using Single Sign-On (SSO) to gain access to multiple resources

• Systems using federated authentication protocols as this may help to avoid detection

• Email accounts

Password Spraying may be used as an initial attack and/or for lateral movement.

...