BACK TO INCIDENTSAPT ATTACK
CONFIRMED
Microsoft
DATE: January 19, 2024
SECTOR: Technology
LOCATION: United States
SUMMARY
Nation-state actor Midnight Blizzard compromises Microsoft corporate email systems
DETAILED ANALYSIS
Microsoft disclosed that Midnight Blizzard (Nobelium), a Russian state-sponsored threat actor, gained access to a legacy test OAuth application and used it to access Microsoft corporate email accounts, including those of senior leadership and cybersecurity teams.
IMPACT ASSESSMENT
Corporate email compromise, potential access to sensitive internal communications
INCIDENT METADATA
INCIDENT ID
INC-2024-002
THREAT TYPE
APT
INDUSTRY
Technology
STATUS
Confirmed