Hacker attack on Microsoft: executives under surveillance, source code compromised

Teacher

Professional
Messages
2,673
Reputation
9
Reaction score
688
Points
113
The company fights against unauthorized access to its systems.

As a result of an unprecedented cyberattack, attackers managed to penetrate the critical software systems of the technology giant Microsoft, which first became known in January. However, according to the latest data released yesterday, the scale of this incident turned out to be much more serious and widespread than initially thought.

Hackers managed to gain high-level access to key components of Microsoft's internal infrastructure, which represents one of the most devastating cyber attacks in the company's history. This incident threatens the security of a huge number of corporate and government customers who use Microsoft software products around the world.

According to the company, in recent weeks, attackers have used stolen information from Microsoft's corporate electronic systems to access source code repositories and internal systems. The source code is especially valuable in the corporate environment and among spies, as it contains the secret "stuffing" of the software that ensures its functioning. Access to the source code makes it possible to conduct subsequent attacks on other systems.

The security breach was announced in January, shortly after another major technology company, Hewlett Packard Enterprise, reported that its cloud electronic systems were hacked by the same hackers. The scale of the attack and the specific purposes of the hackers ' actions are still unclear, but experts point out that the group behind these attacks previously conducted extensive intelligence-gathering campaigns.

This group was involved in the famous email security breach of several US agencies through the software of the US contractor SolarWinds, discovered in 2020. The attackers had access to unclassified email accounts in agencies such as the US Department of Homeland Security and the US Department of Justice for several months before the operation was discovered.

According to alarming data from US officials and independent cybersecurity experts, after the widely publicized incident in 2020, hackers not only did not stop their activities, but also continued large-scale campaigns to penetrate the internal systems of leading technology companies as part of their intelligence operations.

According to Microsoft's analysis, the stolen confidential information could have been used by attackers to identify vulnerabilities and potential targets for further attacks, as well as to improve their ability to successfully implement them, as indicated in the accompanying blog post to the statement to the US Securities and Exchange Commission.

"At this time, we have no evidence that Microsoft's systems designed to work with customers have been compromised," the company said.
 
Top