Search cyberveille.decio.ch

Found 7 bookmarks

Custom sorting

Midnight Blizzard: Guidance for responders on nation-state attack

The Microsoft security team detected a nation-state attack on our corporate systems on January 12, 2024, and immediately activated our response process to investigate, disrupt malicious activity, mitigate the attack, and deny the threat actor further access. The Microsoft Threat Intelligence investigation identified the threat actor as Midnight Blizzard, the Russian state-sponsored actor also known as NOBELIUM.

#microsoft #2024 #EN #Midnight #MidnightBlizzard #guide #attack #TTP

·microsoft.com·Jan 26, 2024

Midnight Blizzard: Guidance for responders on nation-state attack

Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack

Microsoft on Friday revealed that it was the target of a nation-state attack on its corporate systems that resulted in the theft of emails and attachments from senior executives and other individuals in the company's cybersecurity and legal departments. The Windows maker attributed the attack to a Russian advanced persistent threat (APT) group it tracks as Midnight Blizzard (formerly Nobelium), which is also known as APT29, BlueBravo, Cloaked Ursa, Cozy Bear, and The Dukes.

#thehackernews #en #2024 #Microsoft #APT29 #Russia #theft #mail #executives #attack #MidnightBlizzard

·thehackernews.com·Jan 20, 2024

Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack

The five-day job: A BlackByte ransomware intrusion case study

In a recent investigation by Microsoft Incident Response of a BlackByte 2.0 ransomware attack, we found that the threat actor progressed through the full attack chain, from initial access to impact, in less than five days, causing significant business disruption for the victim organization.

#microsoft #EN #2023 #BlackByte #ransomware #attack #report

·microsoft.com·Jul 8, 2023

The five-day job: A BlackByte ransomware intrusion case study

Malicious OAuth applications abuse cloud email services to spread spam

Microsoft discovered an attack where attackers installed a malicious OAuth application in compromised tenants and used their Exchange Online service to launch spam runs.

#microsoft #EN #2022 #Exchange #OAuth #abuse #spam #attack

·microsoft.com·Sep 23, 2022

Malicious OAuth applications abuse cloud email services to spread spam

Microsoft investigates Iranian attacks against the Albanian government

Shortly after the destructive cyberattacks on the Albanian government in mid-July, the Microsoft Detection and Response Team (DART) was engaged to lead an investigation into the attacks.

#microsoft #EN #2022 #investigation #DART #EUROPIUM #Albania #Iran #attack

·microsoft.com·Sep 9, 2022

Microsoft investigates Iranian attacks against the Albanian government

Malicious OAuth applications abuse cloud email services to spread spam

Microsoft discovered an attack where attackers installed a malicious OAuth application in compromised tenants and used their Exchange Online service to launch spam runs.

#microsoft #EN #2022 #Exchange #OAuth #abuse #spam #attack

·microsoft.com·Sep 23, 2022

Malicious OAuth applications abuse cloud email services to spread spam

Microsoft investigates Iranian attacks against the Albanian government

Shortly after the destructive cyberattacks on the Albanian government in mid-July, the Microsoft Detection and Response Team (DART) was engaged to lead an investigation into the attacks.

#microsoft #EN #2022 #investigation #DART #EUROPIUM #Albania #Iran #attack

·microsoft.com·Sep 9, 2022

Microsoft investigates Iranian attacks against the Albanian government