Microsoft has announced this A group of Russian cybercriminals accessed several email accounts of some company executives.
Further details about the attack were published on the Microsoft Security Response Center blog. In November 2023, the hacker group known as Nobelium and Midnight Blizzard managed to access several company email accounts.
According to Microsoft, the email accounts were used by “Members of our leadership team and employees in cybersecurity, legal and other functions.” Also the group “Some emails and attached documents leaked.”
The company says it only discovered this attack last week, on January 12th. Measures taken to “Mitigate the attack and deny further access to the threat actor” Microsoft added:
The attack was not the result of a vulnerability in Microsoft products or services. To date, there is no evidence that the threat actor had access to customer environments, production systems, source code, or artificial intelligence systems.
In November, Microsoft announced a new initiative to improve its digital security after Chinese cybercriminals accessed Outlook-based government email accounts in the US and Europe.
The company also stated that it will work with law enforcement and regulators as they continue to investigate this cyberattack and will provide further details as appropriate.
