Hackers from Russia attacked Microsoft: Microsoft reveals new details about leaked emails

At the end of 2023, hackers linked to the Russian government gained access to a "very small percentage" of Microsoft's corporate email accounts.

Here's What We Know

The attack targeted employees, including members of senior management, cybersecurity, and legal teams. The attackers used a password spoofing technique to gain access to the accounts.

The group, known as Midnight Blizzard or Nobelium, organised this attack along with the SolarWinds hack back in 2020.

The US government has condemned Microsoft for its "inadequate" cybersecurity culture and called for a "major overhaul". The US Cybersecurity and Infrastructure Agency (CISA) has ordered federal agencies to take steps to protect their systems from similar attacks.

Microsoft has been taking steps to improve the security of its systems, but it may take longer to fully restore customer confidence.

Source: Bloomberg