#MY MICROSOFT ACCOUNT GOT HACKED HOW TO#
#MY MICROSOFT ACCOUNT GOT HACKED UPDATE#
#MY MICROSOFT ACCOUNT GOT HACKED ARCHIVE#

“Access died when I was sleeping,” one of the members wrote in the group’s public chat. However, the LAPSUS$ gang says the group has already lost access to Microsoft’s systems. So far, the company has only said it’s investigating the alleged hack. Microsoft did not immediately respond to a request for comment.

#MY MICROSOFT ACCOUNT GOT HACKED ARCHIVE#

Bing and Cortana around 45%,” LAPSUS$ said in a post in the group’s public chatroom.Īccording (Opens in a new window) to BleepingComputer, the archive expands to 37GB once it’s been uncompressed, and contains the source code to over 250 projects that appear to belong to Microsoft. If real, the file dump risks exposing sensitive information about the company, including data on employees and software certificates, which cybercriminals could further exploit.

On Monday, the LAPSUS$ gang began circulating a 10GB compressed archive that supposedly contains internal data on Microsoft’s Bing search engine and Bing Maps, along with the source code to the company’s voice assistant software Cortana. The cybercriminal group that claims to have breached Microsoft has started to dump files allegedly taken from the hack. The recommendations by Microsoft to help prevent similar LAPSUS$ hacks includes using multifactor authentication for all users at all locations, encouraging strong passwords, using passwordless authentication if available, and adding a VPN as an extra layer of authentication. This public disclosure escalated our action allowing our team to intervene and interrupt the actor mid-operation, limiting broader impact.'Īlthough any successful hack is bad news for an organization, in this case it seems to be limited and has no impact on Microsoft's customers. Our team was already investigating the compromised account based on threat intelligence when the actor publicly disclosed their intrusion. The tactics DEV-0537 used in this intrusion reflect the tactics and techniques discussed in this blog.

'Microsoft does not rely on the secrecy of code as a security measure and viewing source code does not lead to elevation of risk. Our cybersecurity response teams quickly engaged to remediate the compromised account and prevent further activity. Our investigation has found a single account had been compromised, granting limited access. No customer code or data was involved in the observed activities. 'This week, the actor made public claims that they had gained access to Microsoft and exfiltrated portions of source code. As part of a security blog post (Opens in a new window) published late Tuesday, Microsoft included a section titled 'Actor actions targeting Microsoft' which explains what happened:

#MY MICROSOFT ACCOUNT GOT HACKED UPDATE#

UPDATE 3/23: Following the dumping of files that hacking group LAPSUS$ allegedly gathered by hacking Microsoft, Microsoft has now confirmed it was compromised through a single account.

#MY MICROSOFT ACCOUNT GOT HACKED HOW TO#

How to Set Up Two-Factor Authentication.How to Record the Screen on Your Windows PC or Mac.How to Convert YouTube Videos to MP3 Files.How to Save Money on Your Cell Phone Bill.How to Free Up Space on Your iPhone or iPad.How to Block Robotexts and Spam Messages.

My microsoft account got hacked