AP

Microsoft: China-based hackers breached government, individual email accounts

Jul 12, 2023, 6:44 AM | Updated: 8:19 am

A presenter talks about Microsoft in the Information Age during the World Artificial Intelligence C...

A presenter talks about Microsoft in the Information Age during the World Artificial Intelligence Conference in Shanghai, Thursday, July 6, 2023. A China-based hacking group has breached email accounts linked to government agencies in Western Europe, Microsoft Corp. said in a blog post published Tuesday, July 11. (AP Photo/Ng Han Guan)
Credit: ASSOCIATED PRESS

(AP Photo/Ng Han Guan)

A China-based hacking group has breached email accounts linked to government agencies in Western Europe, Microsoft Corp. says.

In a blog post published Tuesday, Microsoft said the group, which it identified as Storm-0558, focuses on acts such as espionage and data theft.

The group gained access to email accounts affecting about 25 organizations including government agencies and to accounts of individuals linked to these organizations, and had gone undetected for about a month until customers complained to Microsoft about abnormal mail activity.

“We assess this adversary is focused on espionage, such as gaining access to email systems for intelligence collection,” Charlie Bell, Microsoft’s executive vice president of security, said in a separate Microsoft post.

The hackers carried out the breach by forging authentication tokens — a piece of information used to verify the identity of a user — required to access the email accounts. Microsoft has since dealt with the attack and informed affected customers.

Microsoft said it is working with the Department of Homeland Security and the Cybersecurity and Infrastructure Security Agency, among others, to guard against such attacks.

It also said it would continue to monitor Storm-0558’s activities.

The Storm-0558 attack is the latest security breach discovered to have been carried out by China-based hackers.

Last month, Google-owned cybersecurity firm Mandiant said suspected state-backed Chinese hackers broke into the networks of hundreds of public and private sector organizations globally by using a security hole in a popular email security tool.

Earlier this year, Microsoft said state-backed Chinese hackers have been targeting U.S. critical infrastructure and could be laying the technical groundwork for the potential disruption of critical communications between the U.S. and Asia during future crises.

China says the U.S. also engages in cyberespionage against it, hacking into computers of its universities and companies.

AP

Photo: A delegate wears a hat with pins during the Republican National Convention Monday, July 15, ...

Christine Fernando, Steve People and Jill Colvin, The Associated Press

Rep. Walsh speaks for Washington as cheering GOP delegates nominate Trump for president

Cheering GOP delegates formally nominated Donald Trump for president at Monday's Republican National Convention kickoff.

6 days ago

Photo: Sen. J.D. Vance, R-Ohio, right, points toward Republican presidential candidate former Presi...

Jill Colvin, Julie Carr Smyth, Steve Peoples and Zeke Miller, The Associated Press

Trump picks Sen. JD Vance of Ohio, a once-fierce critic turned loyal ally, as his GOP running mate

Donald Trump named Sen. JD Vance of Ohio as his running mate, choosing a onetime critic who became a loyal ally.

6 days ago

trump assassination...

Ayanna Alexander, The Associated Press

What to know about Trump assassination attempt and the investigation into the shooting

Authorities want to know how a shooter was able to get on top of a roof so close to where former President Donald Trump was speaking and open fire.

6 days ago

Photo: Republican presidential candidate former President Donald Trump is surrounded by U.S. Secret...

Julie Carr Smyth, Jill Colvin, Colleen Long, Michael Balsamo, Eric Tucker and Michelle L. Price, The Associated Press

Trump heads to convention as authorities investigate motive, security in assassination attempt

Trump called for unity and resilience after an attempt on his life added fresh uncertainty to an already tumultuous presidential campaign.

7 days ago

Photo: President Joe Biden speaks from the Roosevelt Room of the White House in Washington, Sunday,...

Will Weissert and Zeke Miller, The Associated Press

In primetime address, Biden says country must not go down road of political violence

President Joe Biden says “we can’t, we must not go down” the road of political violence in America after the attempted Trump assassination.

7 days ago

Photo: President Joe Biden speaks at a news conference following the NATO Summit in Washington, Thu...

Zeke Miller, Seung Min Kim, Lisa Mascaro and Colleen Long, The Associated Press

Biden says during news conference he’s going to ‘complete the job’ despite calls to bow out

Biden used his highly anticipated news conference to deliver a defense of his policies and batted away questions about his ability to serve.

10 days ago

Microsoft: China-based hackers breached government, individual email accounts