Would not you want to know what tech giants know about you? Which is just what Russian federal government hackers want, much too.
On Friday, Microsoft disclosed that the hacking group it calls Midnight Blizzard, also recognized as APT29 or Cozy Bear — and commonly thought to be sponsored by the Russian govt — hacked some corporate electronic mail accounts, which include all those of the company’s “senior leadership team and personnel in our cybersecurity, authorized, and other functions.”
Curiously, the hackers didn’t go following shopper knowledge or the traditional corporate facts they might have normally absent just after. They desired to know more about by themselves, or a lot more specifically, they wished to know what Microsoft is familiar with about them, according to the company.
Call Us
Do you have additional information about this hack? We’d adore to listen to from you. From a non-do the job device, you can speak to Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or by using Telegram, Keybase and Wire @lorenzofb, or e mail [email protected]. You also can make contact with TechCrunch by means of SecureDrop.
“The investigation suggests they have been to begin with targeting email accounts for information relevant to Midnight Blizzard by itself,” the organization wrote in a blog site article and SEC disclosure.
In accordance to Microsoft, the hackers utilized a “password spray attack” — basically brute forcing — versus a legacy account, then made use of that account’s permissions “to accessibility a very small proportion of Microsoft company e-mail accounts.”
Microsoft did not disclose how several e mail accounts were being breached, nor accurately what information and facts the hackers accessed or stole.
Firm spokespeople did not promptly respond to a ask for for comment.
Microsoft took advantage of news of this hack to communicate about how they are likely to shift ahead to make alone extra secure.
“For Microsoft, this incident has highlighted the urgent require to transfer even faster. We will act straight away to implement our latest protection specifications to Microsoft-owned legacy units and inner enterprise processes, even when these changes may possibly induce disruption to existing company procedures,” the business wrote. “This will very likely trigger some degree of disruption whilst we adapt to this new actuality, but this is a needed step, and only the initial of a number of we will be using to embrace this philosophy.”
APT29, or Cozy Bear, is extensively believed to be a Russian hacking team functioning responsible for a collection of higher-profile assaults, this sort of as these from SolarWinds in 2019, the Democratic Countrywide Committee in 2015, and numerous additional.
