Microsoft disrupts hacking attempts by Russian military spies

Microsoft claims that it has disrupted hacking attempts by Russian military spies aimed at breaking into Ukrainian, European Union, and American targets.
Microsoft stores
A group nicknamed Strontium used seven internet domains as part of an effort to spy on government bodies and think tanks in the EU and the United States, as well as Ukrainian institutions such as media organizations, Microsoft said in a blog post.

Microsoft did not identify any of the targets by name.

Strontium is Microsoft’s moniker for a group others often call Fancy Bear or APT28 – a hacking squad linked to Russia’s military intelligence agency.

Microsoft last month said it observed destructive malware in systems belonging to several Ukrainian government agencies and organizations that work closely with the Ukrainian government.

The organizations affected by this malware include government agencies that provide critical executive branch or emergency response functions and an IT firm that manages websites for public and private sector clients, including government agencies whose websites were recently defaced.

Microsoft Threat Intelligence Center (MSTIC) has published a technical blog post detailing Microsoft’s investigation and how the security community can detect and defend against this malware.

Related News

Latest News

Latest News