Technology

Microsoft is once again under attack by Russian-backed hackers.

2024-03-11 05:30:42




There is a report from Techspot that Microsoft has released a new update regarding nation-state attacks that were revealed in January. Kremlin-backed hackers known as 'Midnight Blizzard' have caused significant damage and Redmond insists they are still trying to disrupt Microsoft's systems.


Microsoft's security team earlier this year discovered an attack on its systems that had been going on since November 2023. The perpetrators were initially identified as a Russian cyber spy group known as Midnight Blizzard, Apt29, Nobelium, or Cozy Bear. Microsoft downplays damage to corporate networks


However, further investigation by Microsoft has revealed evidence of additional compromises by Midnight Blizzard hackers in recent weeks. These Kremlin spies used information exfiltrated from the initial attack to gain further unauthorized access. and achieve success It violates Microsoft's source code repository and unspecified internal systems. However, this situation may evolve as the investigation progresses in the coming weeks.


Some of this confidential information comes from emails exchanged between Microsoft and customers. The company has reached out to all affected parties to advise them. In January, Midnight Blizzard attacked legacy non-production test accounts using a password spray attack. This attempts to guess a known user's password from a list of common passwords.


According to Microsoft, password-scattering and other attacks by Midnight Blizzard increased tenfold in February. Compared to the "massive" attacks already in place by January 2024, Microsoft is concerned that they may exploit the newly stolen data to identify additional attack areas. This demonstrates the sophistication and unprecedented nature of nation-state cyberattacks.

Leave a comment :

Other interesting articles

There are many other interesting articles, try selecting them from below.