Microsoft: Russian Hackers Had Access to Executives' Emails
BankInfoSecurity
|
Summary
Microsoft states Russian state hackers, termed Midnight Blizzard, had access to its executives' emails for six weeks without customer data or production systems breach. The cybersecurity and legal departments' emails and documents were exfiltrated before detecting and terminating the threat on January 13. The breach through a password spraying attack on a non-production test tenant account affected a small percentage of Microsoft corporate email accounts. The incident's impact on the company's finances or operations is unclear.
