How to protect your ADFS from password spraying attacks
A password spraying attack is a specialized password attack commonly used by attackers that is reasonably effective and helps avoid detection by traditional password defenses. Instead of trying many different passwords on a single user account, the password spraying attack may try one or two common passwords across many different accounts and services. It may even span across many different organizations. It's one of the top ten most common password attacks happening now. In this type of attack, the hacker picks passwords commonly used by end-users or found on breached password dumps. Password spraying attacks help avoid detection by many available traditional security monitoring solutions since the attack pattern looks similar to normal failed login attempts. The attempts do not lock out accounts or trigger other monitoring thresholds since there are only a few attempts for each user. Password spraying is all about playing the odds—attackers know if they spray common passwords acr...