Microsoft Kills 18 Azure Accounts Tied to Nation-State Attacks

🗓️ 25 Sep 2020 15:26:11Reported by Lindsey O'DonnellType

Microsoft Suspends 18 Azure Accounts due to Nation-State Attacks. Cybercriminals using Azure AD for command-and-control infrastructure are targeted by Gadolinium, a Chinese state-sponsored group. The group also exploits Microsoft's OneDrive, PowerShellEmpire toolkit, and GitHub for attacks, evolving to include new targets like Asia Pacific, higher education, and regional government

Source	Link
threatpost	www.threatpost.com/newsletter-sign/
microsoft	www.microsoft.com/security/blog/2020/09/24/gadolinium-detecting-empires-cloud/
malpedia	www.malpedia.caad.fkie.fraunhofer.de/actor/leviathan
fireeye	www.fireeye.com/blog/threat-research/2019/03/apt40-examining-a-china-nexus-espionage-actor.html
threatpost	www.threatpost.com/cyberattackers-1-5m-covid-19-emails-per-day/154970/
media	www.media.threatpost.com/wp-content/uploads/sites/103/2020/09/25105527/GADOLINIUM-3.png
github	www.github.com/EmpireProject/

25 Sep 2020 15:26Current

0.3Low risk

Vulners AI Score0.3