Microsoft is reporting that a Russian intelligence agency—the same one responsible for SolarWinds—accessed the email system of the company’s executives. Beginning in late November 2023, the threat actor used a password spray attack to compromise a legacy non-production test tenant account and gain a foothold, and then used the account’s permissions to access a very small percentage of Microsoft corporate email accounts, including members of our senior leadership team and employees in our cybersecurity, legal, and other functions, and exfiltrated some emails and attached documents. The investigation indicates they were initially targeting email accounts for information related to Midnight Blizzard itself. ...
...moreSummary
Total Articles Found: 5
Top sources:
Top Keywords:
- Russia: 5
- Uncategorized: 2
- hacking: 2
- Breaking News: 2
- Security News: 2
Top Authors
- Bruce Schneier: 2
- Pierluigi Paganini: 2
- Ryan Naraine: 1
Top Articles:
- Russian military plans to replace Windows with Astra Linux
- Why Russian APT Fancy Bear hacked the Ukrainian energy firm Burisma?
- Another SolarWinds Orion Hack
- Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage
- Microsoft Executives Hacked
Microsoft Executives Hacked
Published: 2024-01-29 12:03:42
Popularity: 12
Author: Bruce Schneier
Keywords:
Another SolarWinds Orion Hack
Published: 2021-02-04 12:11:53
Popularity: 48
Author: Bruce Schneier
Keywords:
🤖: ""Network Nightmare""
At the same time the Russians were using a backdoored SolarWinds update to attack networks worldwide, another threat actor — believed to be Chinese in origin — was using an already existing vulnerability in Orion to penetrate networks: Two people briefed on the case said FBI investigators recently found that the National Finance Center, a federal payroll agency inside the U.S. Department of Agriculture, was among the affected organizations, raising fears that data on thousands of government employees may have been compromised. […] Reuters was not able to establish how many organizations were compromised by the suspected Chinese operation. The sources, who spoke on condition of anonymity to discuss ongoing investigations, said the attackers used computer infrastructure and hacking tools previously deployed by state-backed Chinese cyberspies...
...moreWhy Russian APT Fancy Bear hacked the Ukrainian energy firm Burisma?
Published: 2020-01-14 16:52:13
Popularity: 86
Author: Pierluigi Paganini
Keywords:
Russia-linked cyber-espionage group hacked the Ukrainian energy company Burisma at the center of the impeachment trial of US President Donald Trump. The Russian cyberspies, operating under Russia’s GRU military intelligence agency (aka Fancy Bear) carried out a spear-phishing campaign in November aimed at accessing the email of Burisma Holdings employees. The attack was detailed by […] The post Why Russian APT Fancy Bear hacked the Ukrainian energy firm Burisma? appeared first on Security Affairs.
...moreRussian military plans to replace Windows with Astra Linux
Published: 2019-06-01 06:55:22
Popularity: 417
Author: Pierluigi Paganini
Keywords:
The Russian army seems to be in the process of replacing the Windows system with the Debian-based Linux distribution Astra Linux. Cyber security seems to subvert the globalization concept, governments are working to develop their own technology fearing possible espionage and sabotage activities of foreign states. The Russian military is in the process of replacing […] The post Russian military plans to replace Windows with Astra Linux appeared first on Security Affairs.
...moreRussian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage
Published: 2024-09-05 18:41:02
Popularity: 21
Author: Ryan Naraine
Keywords:
🤖: ""Spy Game""
A secretive Russian military unit, previously linked to assassinations and destabilization in Europe, is blamed for destructive wiper malware attacks in Ukraine. The post Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage appeared first on SecurityWeek.
...more