Microsoft denies data breach by “Anonymous Sudan” hacktivists

1009

A Microsoft denied the allegations from so-called hacktivists “Anonymous Sudan” that they breached the company's servers and stole the credentials of 30 million customer accounts.

In recent months, as mentioned, Anonymous Sudan has dedicated its efforts to developing distributed denial of service (DDoS) attacks against Western entities. Now, the group has confirmed its affiliation with pro-Russian hacktivists like Killnet.

Last month, Microsoft admitted that Anonymous Sudan was responsible for service outages and outages in early June that affected several of its services, including Azure, Outlook and OneDrive. Yesterday, hacktivists claimed to have “successfully hacked Microsoft"and "accessed a large database containing more than 30 million Microsoft accounts, emails and passwords".

Anonymous Sudan offered to sell this database to interested parties for $50.000 (about €46) and urged interested buyers to contact its Telegram bot to arrange the purchase of the data.

BUT: DDoS attack left marks on Outlook and OneDrive, reveals Microsoft

The post even includes a sample of the data they offered (allegedly stolen from Microsoft) as proof of the breach and warned that Microsoft would deny these claims.

The group provided 100 pairs of credentials, but their origin could not be verified (old data, the result of a breach on a third-party service server, stolen from Microsoft systems).

Contacted for some information about the validity of Anonymous Sudan's claims, a company spokesperson categorically denied any allegations of a data breach.

At this time, our analysis of the data shows that this is not a legitimate claim and that this is data aggregation.

A company representative told BleepingComputer.

The spokesperson went further and stated that the company has no proof that its customers' data has been accessed or compromised.

At this time, it's unclear whether Microsoft's investigation is complete or ongoing. In addition, it is not yet known what the company's reaction will be to the potential public disclosure of the data.

LEAVE AN ANSWER

Please enter your comment!
Please enter your name here