Friday, May 27, 2022
  • Hyderabad
  • Telangana
  • Andhra Pradesh
  • India
  • World
  • Entertainment
  • Science and Tech
  • Sport
  • Business
  • ...
    • NRI
    • View Point
    • cartoon
    • Columns
    • Reviews
    • Education Today
    • Property
    • Videos
    • Lifestyle
E-Paper
  • NRI
  • View Point
  • cartoon
  • Columns
  • Reviews
  • Education Today
  • Property
  • Videos
  • Lifestyle
Home | Tech | Microsoft Warns Customers Against New China Cyber Attack 2

Microsoft warns customers against new China cyber attack

By IANS
Published: Published Date - 07:17 PM, Wed - 3 March 21
Representational image The company has released security updates to protect customers running Exchange Server, and encourages all Exchange Server customers to apply these updates immediately.

New Delhi: Microsoft has warned its customers against a new sophisticated nation-state cyber attack that has its origin in China and is primarily targeting on-premises ‘Exchange Server’ software of the tech giant.

Called “Hafnium,” it operates from China and is attacking infectious disease researchers, law firms, higher education institutions, defence contractors, policy think tanks and NGOs in the US for the purpose of exfiltrating information.

“While Hafnium is based in China, it conducts its operations primarily from leased virtual private servers (VPS) in the US,” said Tom Burt, Corporate Vice President, Customer Security and Trust at Microsoft.

The Microsoft Threat Intelligence Center (MSTIC) found that “Hafnium” would first gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access.

“Second, it would create what’s called a web shell to control the compromised server remotely. Third, it would use that remote access — run from the US-based private servers — to steal data from an organisation’s network,” Burt said in a statement late on Tuesday.

The company has released security updates to protect customers running Exchange Server, and encourages all Exchange Server customers to apply these updates immediately.

“Exchange Server is primarily used by business customers, and we have no evidence that Hafnium’s activities targeted individual consumers or that these exploits impact other Microsoft products,” Burt informed.

This is the eighth time in the past 12 months that Microsoft has publicly disclosed nation-state groups targeting institutions critical to civil society.

“Other activity we disclosed has targeted healthcare organisations fighting Covid-19, political campaigns and others involved in the 2020 elections, and high-profile attendees of major policymaking conferences,” Burt said.

In January, Microsoft admitted that alleged Russian hackers behind the massive SolarWinds attack that affected several top-notch enterprises and government agencies, attempted activities beyond just the presence of malicious SolarWinds code in its environment.

Microsoft discovered that its systems were infiltrated “beyond just the presence of malicious SolarWinds code.”

According to Burt, the new China-based exploits are “in no way connected to the separate SolarWinds-related attacks”.

“We continue to see no evidence that the actor behind SolarWinds discovered or exploited any vulnerability in Microsoft products and services,” he mentioned.

Nine federal agencies and about 100 private sector companies were compromised as a result of the SolarWinds hack, the White House had said.

In a wide-spread cyber-attack on US federal agencies and enterprises, hackers also broke into the networks of NASA and the Federal Aviation Administration (FAA), The Washington Post reported, saying the Biden administration was preparing sanctions against Russia as the cybercriminals are “likely Russian in origin”.

 


Now you can get handpicked stories from Telangana Today on Telegram everyday. Click the link to subscribe.

Click to follow Telangana Today Facebook page and Twitter .

  • Follow Us :
  • Tags
  • China cyber attack
  • cyber-attack
  • Exchange Server
  • Microsoft

Related News

  • Report says Gates ‘poured’ millions into attacking Musk, Tesla CEO fires back

  • Microsoft shares new updates to Windows 11, Store for developers

  • Game On: A return to the basics

  • Microsoft tests new Windows 11 feature drop for Insiders

  • Microsoft founder Bill Gates uses Samsung Galaxy Z Fold 3

  • Microsoft Xbox Live gaming suffers massive outage, fixed now

Latest News

  • Hero Electric scooter catches fire, company says ‘short circuit in power socket’

    11 mins ago
  • Thousands participate in Hyderabad Yoga Utsav

    16 mins ago
  • Shareholder sues Musk for manipulating Twitter stock for personal gains

    26 mins ago
  • Bihari labourers injured in a road mishap in Kothagudem

    23 mins ago
  • Goa pastor arrested for alleged religious conversions

    34 mins ago
  • Sony PSVR 2 likely to have at least 20 games at launch

    42 mins ago
  • ‘Success usually comes to those who are too busy to be looking for it.’ Influencer Rehan Tagale

    45 mins ago
  • ‘Stranger Things 4’: Netflix adds warning card to show’s premiere following Texas school shooting

    47 mins ago

company

  • Home
  • About Us
  • Contact Us

business

  • Subscribe

telangana today

  • Telangana
  • Hyderabad
  • Latest News
  • Entertainment
  • World
  • Andhra Pradesh
  • Science & Tech
  • Sport

follow us

© Copyrights 2022 TELANGANA PUBLICATIONS PVT. LTD. All rights reserved. Powered by Veegam