Live
- Blackberrys launches TechPro collection
- World Suicide Prevention Day 2024: Support for Suicidal Individuals
- MK Stalin unveils Rs 68,773-cr new projects
- Google Chrome Improves Access to Saved Passwords Across Devices
- Kajari Teej 2024: Shubh Muhurat, Rituals, Significance, and Heartfelt Wishes
- Sembcorp to set up Rs 36,238-cr ammonia plant in TN
- Beauty Myths Debunked: Fact vs. Fiction in Skincare and Beauty
- 2 panchayat staff nabbed by ACB
- IAS topper stresses on focus, hard work
- Vijay Thalapathy’s ‘The Greatest of All Time’ Gets U/A Certification
Just In
Chinese hackers accessed US govt emails by exploiting bug: Microsoft
![Representational image Representational image](https://assets.thehansindia.com/h-upload/2023/07/12/1364389-hackers.webp)
Representational image
Microsoft has revealed that Chinese hackers have exploited a flaw in its cloud email service to gain access to email accounts affecting approximately 25 organisations including government agencies as well as related consumer accounts of individuals likely associated with these organisations.
San Francisco: Microsoft has revealed that Chinese hackers have exploited a flaw in its cloud email service to gain access to email accounts affecting approximately 25 organisations including government agencies as well as related consumer accounts of individuals likely associated with these organisations.
The tech giant has published details of activity by a China-based actor it is tracking as "Storm-0558".
"We have been working with the impacted customers and notifying them prior to going public with further details. At this stage -- and in coordination with customers -- we are sharing the details of the incident and threat actor to benefit the industry," said Charlie Bell, Executive Vice President, Microsoft Security.
This China-based hacking group is focused on espionage, such as gaining access to email systems for intelligence collection. This type of espionage-motivated adversary seeks to abuse credentials and gain access to data residing in sensitive systems.
"Our investigation revealed that beginning on May 15, 2023, Storm-0558 gained access to email data from approximately 25 organizations, and a small number of related consumer accounts of individuals likely associated with these organizations," the company said in its latest blog post.
They did this by using forged authentication tokens to access user email using an acquired Microsoft account (MSA) consumer signing key. Microsoft said it has completed mitigation of this attack for all customers.
"We added substantial automated detections for known indicators of compromise associated with this attack to harden defenses and customer environments, and we have found no evidence of further access," said the company.
"We've also been partnering with relevant government agencies like the Department of Homeland Security's (DHS) Cybersecurity and Infrastructure Security Agency (CISA). We are thankful they and others are working with us to help protect affected customers and address the issue," the tech giant added.
![](/images/logo.png)
© 2024 Hyderabad Media House Limited/The Hans India. All rights reserved. Powered by hocalwire.com