Microsoft confirms it was hacked after 37GB of sensitive data was released

Microsoft has been hacked by a gang of hackers. After stealing data from Nvidia and Samsung, a group of hackers gained access to Microsoft’s servers. The attackers left 37 gigabytes of sensitive data, including source code from Bing or Cortana. However, the company claims that no user was affected by the attack and that its teams were able to cut off data extortion.

Updated March 23, 2022

at Long blog post, Microsoft confirms that it was hacked by $LAPSU. At first, Redmond seeks reassurance. She confirms it “No customer code or data was included in the monitored activities” And that the hack is not big enough to harm users. It also explains that only one corporate account has been hacked, giving hackers access to confidential data. In addition, the publication of these documents has allowed Microsoft to “To interfere and interrupt the actor in the middle of the process, thus limiting a broader effect.” As explained in our article, LAPSU did not ask for the $ ransom, as it was able to do so for Nvidia. Microsoft sees this as a group action.out of robbery and destruction.”

Article from March 22, 2022

Microsoft was the victim of a hack, our colleagues from Bleeping Computer reported. By accessing the Azure server, hacker group Lapsus$ claims to have gotten their hands on it The source code for Bing, the Cortana voice assistant And other projects developed by the company’s teams.

In recent weeks, $ Lapsus has already acquired several tech giants. At the beginning of March, the hacker group managed to do this Breaking into Nvidia servers to steal confidential documents. In exchange for his silence, the gang has demanded an end to all restrictions that prevent cryptocurrency mining with graphics cards. after a short time, The group stole 190 GB of data from Samsung servers.

Hackers allegedly received help from a Microsoft employee

During Microsoft hack, Lapsus$ took over 37 GB of confidential data owned by Microsoft. This time, the group did not demand a ransom from the company. On Monday, March 21, 2022, Lapsus$ published all the data stolen during the web attack.

The torrent file, which was shared on the gang’s Telegram diversion, contains information about 250 signed projects with Microsoft. According to hackers, the file contains 100% source code for Bing and about 45% of source code for Bing Maps (an alternative to Google Maps) and Cortana. It also contains code for web infrastructure, websites, and mobile applications.

Experts, interviewed by Bleeping Computer, analyzed the leaked data to ensure its authenticity. Experts have also found Internal email exchange between Microsoft employees in the file.

Read also: Microsoft offers an upgrade for users who hacked the Office suite

According to researchers interviewed by the media, it is possible that $ Lapsus relied on the help of accomplices within the company. When contacted by the media, Microsoft claims to be aware of the $Lapsus assertions. The American giant claims to have opened an investigation to clarify the matter.

source: sleeping computer