Tag

Midnight Blizzard

All articles tagged with #midnight blizzard

cybersecurity1 month ago•1 min saved

Anthropic Report Details Russian Use of Claude AI for Espionage Against Ukraine and Europe

Anthropic disclosed that a Russian state-linked hacking group, identified as GTG-20006 and linked to Midnight Blizzard, utilized Claude AI models to automate cyberespionage against over 20 organizations in Ukraine and Europe. The operation targeted government officials, military personnel, and drone technology suppliers, using AI to automate reconnaissance, phishing, malware evasion, and data extraction. While the primary source focuses on this specific Russian campaign, secondary reporting highlights broader global misuse of Claude by Iranian, Chinese, and Yemeni actors for military and surveillance purposes.

via UNITED24 Media|

#anthropic #claude-ai #cyberespionage

technology2 months ago•4 min saved

Russian‑linked group targets hotel Wi‑Fi to steal Microsoft 365 tokens

Microsoft ties a global hospitality Wi‑Fi campaign to the Russian group Midnight Blizzard (Storm-2945), detailing DNS tampering and two malware families, CornFlake and ChocoShell, used to steal Microsoft 365 tokens and credentials via phishing, device-code prompts, and fake update pages; researchers urge treating hotel Wi‑Fi as untrusted, using MFA/passkeys, and avoiding corporate credentials on guest networks.

via BleepingComputer|

#apt29 #captive-portal #captivecrunch

cybersecurity2 years ago•2 min saved

"Microsoft Continues Battle Against Persistent Russian State Hackers"

Microsoft warns that Russian hackers, known as Midnight Blizzard, have used stolen executive emails to broaden cyberattacks, gaining unauthorized access to source code repositories and internal systems. The group has increased the volume of attacks, such as password sprays, and Microsoft is reaching out to affected customers to assist in mitigating measures. The company expressed surprise at the sustained commitment and focus of the threat actor's resources, and believes the hackers are supported by the Kremlin.

via Fox Business|

#cyberattacks #cybersecurity #email-security

cybersecurity2 years ago•2 min saved

"Russian Hackers' Ongoing Threat to Microsoft's Systems Confirmed"

Microsoft confirmed that Russian state-sponsored hackers, known as Midnight Blizzard, gained access to some of its source code repositories and internal systems in a breach that took place in November 2023. The hackers are attempting to leverage the stolen information, including secrets shared between customers and Microsoft in emails. Microsoft has increased its security investments and is investigating the extent of the breach, while also reaching out to impacted customers. The Kremlin-backed threat actor is considered one of the most prolific and sophisticated hacking groups, compromising high-profile targets such as SolarWinds.

via The Hacker News|

#cyber-attack #cybersecurity #microsoft

cybersecurity2 years ago•3 min saved

"Microsoft's Ongoing Battle Against Russian State-Backed Hackers"

Microsoft revealed that Kremlin-backed hackers, known as Midnight Blizzard, have expanded their access since their January breach, targeting customers and compromising the company's source code and internal systems. The group gained initial access through a weak password and has since used stolen information in follow-on attacks, including password spraying. Microsoft is working to assist affected customers and has emphasized that there is no evidence the hackers gained access to customer-facing systems. Midnight Blizzard is a prolific APT group, and international partners have warned of its expanded activity targeting various sectors.

via Ars Technica|

#cybersecurity #kremlin-backed-hackers #microsoft

cybersecurity2 years ago•2 min saved

Russian State-Backed Hackers Target Microsoft's Core Systems

Microsoft detected a cyberattack by a Russian state-backed group, Midnight Blizzard, in January, which gained access to the company's core software systems and source code repositories. The hackers used information from corporate email systems to attempt unauthorized access, but Microsoft found no evidence of compromise to customer-facing systems. The attack, which began in November, has not materially impacted Microsoft's operations, and the company is working to enhance security measures and assist affected customers.

via ABC News|

#cybersecurity #data-breach #microsoft

cybersecurity2 years ago•2 min saved

Russian State-Sponsored Group Hacks HPE in Cybersecurity Breach

Hewlett Packard Enterprise (HPE) disclosed that its cloud-based email system was breached by the Russia-linked hacking group Midnight Blizzard, which exfiltrated data from a small percentage of HPE mailboxes starting in May 2023. The company suspects the breach is related to an earlier attack in which a limited number of SharePoint files were exfiltrated. This revelation follows Microsoft's disclosure of a similar breach by Midnight Blizzard. HPE does not expect the incident to have a material impact on its business and is continuing its investigation.

via TechCrunch|

#cybersecurity #data-breach #hpe

cybersecurity2 years ago•2 min saved

Russian State Hackers Breach Microsoft Network to Access Executive Email Accounts

Microsoft revealed that its systems were breached by Russian hacking group Midnight Blizzard, with a "very small percentage" of corporate emails, including those of senior leadership, being accessed. The attack, which utilized a "password spray" tactic, was detected last week, but the hackers first gained access in late November. Microsoft stated that the breach did not result from a vulnerability in its products or services and that there is no evidence of access to customer environments, production systems, source code, or AI systems. This incident follows previous breaches by other hacking groups, prompting Microsoft to launch the Secure Future Initiative to enhance its cybersecurity protection.

via Business Insider|

#cybersecurity #data-breach #microsoft