Microsoft Officials’ eMail Breached by State-Sponsored Threat Actors

[Kyaw_Myo_Oo]

Dear All,

In a January 19 blog post, Microsoft disclosed that some of their corporate email accounts were compromised by a state-sponsored threat actor. Starting late last year, “the threat actor used a password spray attack to compromise a legacy non-production test tenant account and gain a foothold, and then used the account’s permissions to access a very small percentage of Microsoft corporate email accounts.” Microsoft became aware of the attack on January 12.

Russian hackers stole Microsoft corporate emails in month-long breach (bleepingcomputer.com)