<p>In a significant cybersecurity incident, Russian hackers, known as Nobelium, successfully breached Microsoft’s corporate network. The hackers employed a password spray attack, exploiting weak passwords to gain access to a small percentage of Microsoft email accounts. Among the compromised accounts were those belonging to senior executives, as well as employees in security and legal teams. The attackers exfiltrated a number of emails and attached documents. It’s important to note that this breach was not the result of a vulnerability in Microsoft’s systems. Fortunately, there is no evidence to suggest that customer environments or production systems were compromised. Microsoft promptly launched an investigation into the incident, attributing the attack to the APT group Midnight Blizzard. Steps have been taken to mitigate the malicious activity and prevent future breaches. The motive behind the attack appears to be the hackers’ interest in gathering information about themselves, as they specifically targeted information related to their activities. Microsoft remains committed to enhancing its security measures to safeguard against future attacks.</p>


Collections

Russian hackers, known as Nobelium, successfully breached Microsoft's corporate network through a password spray attack. Senior executives' emails were accessed, but customer environments and production systems were not compromised. Microsoft has launched an investigation and is enhancing security measures to prevent future breaches.

Russian State Hackers Breach Microsoft's Corporate Network and Access Senior Leadership Emails