SolarWinds hackers attack Microsoft in apparent recon mission | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker

Microsoft has confirmed it was the subject of a hacking attack by Midnight Blizzard in what is said to have been a targeted recon mission.

The hackers, also known as ATP29, Cozy Bear, and Nobelium, are considered to be state-sponsored by Russia and responsible for the 2020 infiltration of SolarWinds’ Orion platform.

A Microsoft statement confirmed its security team detected what it described as a nation-state attack on its corporate systems and immediately activated a response process to investigate, disrupt malicious activity, mitigate the attack, and deny the threat actor further access.

Although the malicious activity was discovered on 12 January, it is believed the cyberattack commenced in late November 2023, leaving the American multinational tech giant to play catch-up on the serious incident.

Early indications have suggested Midnight Blizzard was able to access a legacy system account using a password spraying attack.

From there, the hackers were able to hone in on Microsoft corporate email accounts belonging to senior representatives in cyber security and legal functions to a degree of success. They were looking to scan the accounts for information on themselves – Midnight Blizzard – to find out what intel big tech is sitting on.

In what appears to be a very sensitive matter, the stakes are increased further if the Russian state is involved, as believed.

Investigation outcome

Microsoft has stressed the robustness of its systems, stating the hack was not due to internal vulnerability but instead, as a result of the sophisticated attack, which highlights the “continued risk posed to all organizations from well-resourced nation-state threat actors like Midnight Blizzard.”

It has allayed fears of access to customer environments, production systems, source code, or AI systems but said it would notify anyone impacted if any action is required.

Microsoft has pledged to investigate the matter thoroughly and to take whatever measures are required, depending on the outcome of the findings, working together with the relevant authorities.

Image: Tima Miroshnichenko/Pexels.

Graeme Hanna

Freelance Writer

Graeme Hanna is a full-time, freelance writer with significant experience in online news as well as content writing.

Since January 2021, he has contributed as a football and news writer for several mainstream UK titles including The Glasgow Times, Rangers Review, Manchester Evening News, MyLondon, Give Me Sport, and the Belfast News Letter.

Graeme has worked across several briefs including news and feature writing in addition to other significant work experience in professional services. Now a contributing news writer at, he is involved with pitching relevant content for publication as well as writing engaging tech news stories.


Click Here For The Original Story From This Source.

National Cyber Security