Compromiseseverity: High2024-01-19
Midnight Blizzard intrusion into Microsoft corporate email
published by Microsoft Security Response Center
Actor
Russian state-sponsored intrusion set publicly attributed to the SVR. Long history of espionage operations against Western government, diplomatic, think tank, and technology targets, including the So…
Summary
Microsoft disclosed that Midnight Blizzard (APT29) compromised a legacy non-production test tenant via password spray, then pivoted to access a small number of Microsoft corporate email accounts, including members of the senior leadership team and cybersecurity / legal staff.
Tags
password-sprayoauthemail