Outlook Breach: Microsoft Reveals How a Crash Dump Led to a Major Security Breach

China-based threat actor known as Storm-0558 acquired the inactive consumer signing key to forging tokens to access Outlook. This enabled the adversary to access a crash dump of the consumer signing system that took place in April 2021 and steal the key. The crash dump was moved to a debugging environment on the internet-connected corporate network.