Office 2016 home and business accounts, many of high-level employees at Fortune 2000 companies, were hit using brute-force attack with the earliest operationalized cloud-to-cloud business attacks, dependant on Skyhigh Networks, which began tracking the campaign early next year.

Skyhigh detected a design of organized attacks including upwards of 100,000 failed office 2016 home and business for mac logins from 67 IP addresses and 12 networks. Attackers tried signing in with various versions of employees' usernames, the they own already possessed names and passwords but needed usernames for spearphishing campaigns or data access.

All login attempts originate from instances hosted on cloud service platforms and targeted 48 businesses. The "slow-and-low" pace of attacks indicates threat actors were looking to stay distinct; for every business, a handful of senior employees were targeted. Those who were hit happen to be notified.