2024-01-20 01:13:40
Published20. January 2024, 02:13
Technology: Microsoft suffered a cyberattack from hackers linked to the Russian state
Emails of senior Microsoft executives were hacked by hackers linked to Russian intelligence services.
The last attack took place on January 12.
AFP
Hackers linked to Russian intelligence services hacked the emails of senior Microsoft executives, according to a court document filed by the American IT giant.
According to Microsoft, the perpetrator of the cyberattack is “Midnight Blizzard”. This group acts in conjunction with Russia’s foreign intelligence services, according to Washington and London. “This actor is known to primarily target states, diplomatic entities, non-governmental organizations, and IT service providers, in the United States and Europe,” Microsoft said in a blog post last August, regarding a previous cyber attack.
“They seek to collect intelligence by spying on foreign interests over the long term.” The activities of “Midnight Blizzard,” also known as “Nobelium,” have been traced back to early 2018, according to Microsoft.
The attack began in November 2023
The company’s security team detected the latest attack on January 12, triggering defenses that blocked the hackers’ further access. The attack began last November, when hackers tried passwords on a series of accounts and gained access to an old test account, Microsoft said in the court document.
The hackers then used this “holding point” to access certain Microsoft employee accounts, including those of executives and members of the security team, and retrieve emails and attachments. “The investigation indicates that the hackers first targeted email accounts for information related to Midnight Blizzard itself,” Microsoft said.
According to the company, there is no evidence that the hackers accessed customer accounts, production systems, source code or artificial intelligence software at Microsoft. “Given the reality of well-resourced and state-funded malicious actors, we are seeking a new balance between security and business risks,” Microsoft said.
“We will act immediately to apply our current security standards to legacy systems and internal business processes owned by Microsoft, even if these changes risk disrupting existing business processes.”
(AFP)
1705715118
#Technology #Microsoft #suffered #cyberattack #hackers #linked #Russian #state
