\n<\/p>\n
Microsoft is revealing today that it has discovered a nation-state attack on its corporate systems from the same Russian state-sponsored group of hackers that were responsible for the sophisticated SolarWinds attack<\/a>. Microsoft says the hackers, known as Nobelium, were able to access email accounts of some members of its senior leadership team late last year. <\/p>\n<\/div>\n \u201cBeginning in late November 2023, the threat actor used a password spray attack to compromise a legacy non-production test tenant account and gain a foothold, and then used the account\u2019s permissions to access a very small percentage of Microsoft corporate email accounts, including members of our senior leadership team and employees in our cybersecurity, legal, and other functions, and exfiltrated some emails and attached documents,\u201d says the Microsoft Security Response Center in a blog post<\/a> filed late on Friday.<\/p>\n<\/div>\n Microsoft says the group was \u201cinitially targeting email accounts\u201d for information about themselves, but it\u2019s not clear what other emails and documents have been stolen in the process. Microsoft only discovered the attack last week on January 12th, and the company hasn\u2019t disclosed how long the attackers were able to access its systems.<\/p>\n<\/div>\n \u201cThe attack was not the result of a vulnerability in Microsoft products or services. To date, there is no evidence that the threat actor had any access to customer environments, production systems, source code, or AI systems,\u201d says Microsoft.<\/p>\n<\/div>\n The attack took place just days after Microsoft announced its plan to overhaul its software security following major Azure cloud attacks. While Microsoft customers don\u2019t appear to have been impacted in this new incident and this wasn\u2019t the result of a Microsoft vulnerability, this is still the latest in a line of cybersecurity incidents for Microsoft. It found itself at the center of the SolarWinds attack nearly\u00a0three years ago<\/a>, then 30,000 organizations\u2019\u00a0email servers were hacked<\/a>\u00a0in 2021 due to a Microsoft Exchange Server flaw, and Chinese hackers breached US government emails<\/a>\u00a0via a Microsoft cloud exploit last year.<\/p>\n<\/div>\n Microsoft is now changing the way it designs, builds, tests, and operates its software and services. It\u2019s the biggest change to its security approach since the company announced its Security Development Lifecycle (SDL) in 2004 after huge Windows XP flaws knocked PCs offline.<\/p>\n<\/div>\n