Russian-Linked Hackers Breach Microsoft Executives’ Email Accounts: Midnight Blizzard Cyberattack

Hackers linked to Russian intelligence have breached the email accounts of top executives at Microsoft, according to a court document filed by the giant American technology company.

Microsoft stated that the hackers are affiliated with the “Midnight Blizzard” group, which operates in collaboration with Russian external intelligence, according to Washington and London.

In a blog post last August regarding a previous cyberattack, Microsoft mentioned, “It is known that this group primarily targets diplomatic entities, non-governmental organizations, and information technology service providers in the United States and Europe.”

The activities of “Midnight Blizzard,” also known as “Nobelium,” date back to early 2018, according to Microsoft. The company’s security team discovered the recent attack on January 12, leading to the deployment of defenses that prevented the intruders from accessing more accounts.

The attack began last November when the infiltrators attempted to use a password on a series of accounts and successfully accessed an old test account. They then used this “pivot point” to access specific accounts of Microsoft employees, including accounts of managers and members of the security team, gaining access to emails and attachments.

Microsoft indicated that the investigation suggests the hackers initially targeted email accounts to obtain information related to Midnight Blizzard itself.

According to the company, there is no evidence that the infiltrators gained access to customer accounts, production systems, source code, or artificial intelligence programs at Microsoft.

Microsoft stated, “Given the fact that there are malicious actors with significant resources funded by states, we are seeking to find a new balance between security risks and business risks.”