Microsoft confirms it was hacked2022-03-23 19:20 by DanielaTags: Microsoft, hackers, Lapsus$
Microsoft was hacked by the South American hacker crew Lapsus$, the software giant admitted in a blog post and lengthy analysis yesterday (March 22). The company denied that there's any danger associated with this particular attack. "Our investigation has found a single account had been compromised, granting limited access," Microsoft said. "No customer code or data was involved in the observed activities. Our cybersecurity response teams quickly engaged to remediate the compromised account and prevent further activity," Microsoft said. "Microsoft does not rely on the secrecy of code as a security measure and viewing source code does not lead to elevation of risk. Our team was already investigating the compromised account based on threat intelligence when the actor publicly disclosed their intrusion. This public disclosure escalated our action allowing our team to intervene and interrupt the actor mid-operation, limiting broader impact." Lapsus$ has been on a tear recently if its claims are to be believed. The group says it's had access to data from Okta, Samsung, and Ubisoft, as well as Nvidia and now Microsoft. While companies like Samsung and Nvidia have admitted their data was stolen, Okta pushed back against the group's claims that it has access to its authentication service, claiming that "The Okta service has not been breached and remains fully operational." The group has been known to use a number of different techniques for gaining initial access, which have included "paying employees, suppliers, or business partners of target organizations for access to credentials and multifactor authentication (MFA) approval," according to Microsoft researchers. Read more -here-
Post your review/comments
rate:
avg:
|