Russian hackers stole Microsoft corporate emails in month-long breach
Microsoft has disclosed that several of its corporate email accounts were breached by a Russian state-sponsored hacking group Midnight Blizzard. The company detected the attack on January 12, 2024. Microsoft’s internal investigation concluded that the attack was conducted by a group of Russian threat actors associated with Nobelium/APT29 (sometimes known as Midnight Blizzard or Cozy Bear). The software titan said that the threat actors breached their systems in November 2023 by conducting a password spray attack to access a legacy non-production test tenant account. Microsoft says the hackers accessed a “small percentage” of Microsoft’s corporate email accounts for over a month including accounts tied to the company’s leadership team and employees in the cybersecurity and legal departments. The company speculates that the threat actors were looking for information about their own gang.
The fact that the hackers were able to gain access to the account using a brute force attack indicates it was not protected with two-factor authentication (2FA) or multi-factor authentication (MFA), a security practice that Microsoft recommends on all types of online accounts.
How It Could Affect Your Business: Even the biggest companies can be brought low by a simple cybersecurity problem.
I Do I.T. to the Rescue: An endpoint detection and response solution can help businesses stop the spread of a cyberattack fast.
Get In Touch
Share On Social Media
Other Recent Blog Articles
The Tariff Tango: How Import Taxes Can Impact Your Computer Gear
In today’s interconnected world, the price tag on your laptop, monitor, or even that trusty keyboard often reflects a global journey of components and assembly. But what happens when governments…
Read MoreFrom Stumptown to Secure Town: Tech Protection for Portland Small Businesses
As a small business owner in the vibrant Portland metro area, you’re likely juggling a million things. From serving your customers to managing your team and keeping a close eye…
Read MoreThe Perils of Public Wi-Fi: Are You Browsing Dangerously? (And How a VPN Can Be Your Digital Shield)
That free Wi-Fi at the coffee shop, the airport, or even your hotel might seem like a convenient way to stay connected. But beneath that welcoming signal lies a potential…
Read More