"Second, it would create what's called a web shell to control the compromised server remotely. Third, it would use that remote access -- run from the US-based private servers -- to steal data from an organisation's network," Burt said in a statement late on Tuesday. The company has released security updates to protect customers running Exchange Server, and encourages all Exchange Server customers to apply these updates immediately.

"Exchange Server is primarily used by business customers, and we have no evidence that Hafnium's activities targeted individual consumers or that these exploits impact other Microsoft products," Burt informed. This is the eighth time in the past 12 months that Microsoft has publicly disclosed nation-state groups targeting institutions critical to civil society.

Poll

Who will win the Punjab Elections?

BJP 32.76%

AAP 43.10%

INC 24.14%

Submit

View All In Poll

"Other activity we disclosed has targeted healthcare organisations fighting Covid-19, political campaigns and others involved in the 2020 elections, and high-profile attendees of major policymaking conferences," Burt said. In January, Microsoft admitted that alleged Russian hackers behind the massive SolarWinds attack that affected several top-notch enterprises and government agencies, attempted activities beyond just the presence of malicious SolarWinds code in its environment.

Microsoft discovered that its systems were infiltrated "beyond just the presence of malicious SolarWinds code." According to Burt, the new China-based exploits are "in no way connected to the separate SolarWinds-related attacks". "We continue to see no evidence that the actor behind SolarWinds discovered or exploited any vulnerability in Microsoft products and services," he mentioned.

Nine federal agencies and about 100 private sector companies were compromised as a result of the SolarWinds hack, the White House had said. In a wide-spread cyber-attack on US federal agencies and enterprises, hackers also broke into the networks of NASA and the Federal Aviation Administration (FAA), The Washington Post reported, saying the Biden administration was preparing sanctions against Russia as the cybercriminals are "likely Russian in origin".

This story has been sourced from a third party syndicated feed, agencies. Mid-day accepts no responsibility or liability for its dependability, trustworthiness, reliability and data of the text. Mid-day management/mid-day.com reserves the sole right to alter, delete or remove (without notice) the content in its absolute discretion for any reason whatsoever