Microsoft Blames Cyber Attack on China-based Hacker Group

Microsoft believes the recent attacks on its business email software was by the Chinese government-backed hacking group, HAFNIUM. “Microsoft Threat Intelligence Centre (MSTIC) attributes this campaign with high confidence to HAFNIUM, a group assessed to be state-sponsored and operating out of China, based on observed victimology, tactics and procedures,” reads a statement from the company. “In the attacks observed, the threat actor used these vulnerabilities to access on-premises Exchange servers which enabled access to email accounts, and allowed the installation of additional malware to facilitate long-term access to victim environments.” The versions affected are: Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Microsoft Exchange Server 2019 “These vulnerabilitie...