AI-Assisted Cybercrime - Distributed Password Spray
Detects password spraying: a single source IP generating failed logins against many distinct accounts in a short window. AI-assisted planning can produce low-rate credential attacks designed to stay under per-account lockout thresholds; the distinguishing signal is breadth across users rather than volume per user.
YARA-L
