#ParsedReport #CompletenessLow
22-09-2026

Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts

https://www.proofpoint.com/us/blog/threat-insight/Spraying-in-the-Andes-TeamFiltration-Returns

Report completeness: Low

Actors/Campaigns:
Unk_condorfiltration
Unk_sneakystrike

Threats:
Teamfiltration_tool
Password_spray_technique

Victims:
Financial institutions, Retail

Industry:
Financial, Retail

Geo:
German, Latin america, Chilean

TTPs:
Tactics: 1
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1078.004, T1110.003, T1133, T1213

IOCs:
IP: 2

Soft:
SharePoint, Graph API, Microsoft Teams, Microsoft Office, Outlook

Platforms:
cross-platform, x64