In a recent disclosure, Microsoft revealed that Chinese hackers have successfully gained access to the email accounts of approximately 25 organizations, including U.S. government agencies. Microsoft referred to the threat actor behind the incident as Storm-0558, an adversary based in China with a primary focus on espionage and gaining intelligence through unauthorized access to email systems. The company shared these details in a blog post addressing the breach.
The hacker has also compromised the consumer accounts of individuals likely associated with the affected organizations. Prior to disclosing these details publicly, Microsoft has been actively working alongside the affected customers, ensuring they receive timely notifications and support.
Just last month, cybersecurity firm Mandiant, owned by Google, reported that hackers supported by the Chinese government exploited a vulnerability in an email security service to infiltrate the networks of hundreds of public and private sector entities worldwide. Approximately one-third of the compromised entities were government agencies. Chinese officials swiftly dismissed the report, denouncing it as “far-fetched and unprofessional.” The country’s foreign ministry spokesperson went as far as accusing U.S. cybersecurity firms of collaborating with the government in a smear campaign against other nations.
The breach of email accounts by Chinese hackers underscores the ongoing concerns regarding cybersecurity and the persistent threats faced by governments and organizations worldwide. The need for robust defense measures and international cooperation to counter such attacks is becoming increasingly critical as cyber warfare continues to evolve.
Via: Forbes