Microsoft warns Azure cloud users about a Chinese-controlled botnet engaged in password spraying.The botnet, known as CovertNetwork-1658, uses highly evasive techniques for password guessing attacks.The botnet's use of compromised SOHO IP addresses and a rotating set of IP addresses makes detection difficult.The low-volume password spray process makes it challenging to detect multiple failed sign-in attempts from one IP address or account.