Reports from RIA Novosti, citing statements from Microsoft’s press service, alleged that Russian actors supported hackers who targeted the accounts of Microsoft executives. The company acknowledged the issue as a state-sponsored intrustion and provided details about the intervention.
Microsoft’s security team said a state-backed attack on its corporate systems was detected on January 12, 2024. The attackers were identified as Midnight Blizzard, a known Russian state-sponsored group also referred to as Nobelium, according to Microsoft’s public statement.
The company described a sequence of intrusions that began in November 2023, during which the hackers gained access to the email accounts of senior leadership and other Microsoft employees responsible for cybersecurity, legal matters, and related functions.
Microsoft reported that only a small number of employee data appeared to be compromised as a result of the breach.
Prior to these events in Russia, there were claims of extensive “carpet” attacks on domestic banks, suggesting a broader campaign of cybersecurity intrusions.
Earlier, Russian hackers were also said to have infected systems at the European Investment Bank, adding to a pattern of targeted breaches across various institutions.