Storm-0940: State-Sponsored Brute-Force Attacks Targeting Microsoft 365

For seven months, a partner organization has faced a persistent brute-force campaign attributed to Storm-0940, a suspected Chinese state-sponsored actor. No accounts have been compromised, but the Microsoft 365 campaign signals growing interest in organizations across the Baltics and Europe.