By Dean Seal
Microsoft warned that a Chinese state-sponsored hacking group is targeting common IT solutions to spy on companies and organizations around the world.
The company said in its threat intelligence blog Wednesday that it has identified a shift in tactics by Silk Typhoon, a Chinese state actor focused on espionage, toward using remote management tools and cloud applications to infiltrate a targeted organization.
Microsoft hasn't seen the group directly target its cloud services, but Silk Typhoon has exploited unpatched applications to elevate their access and conduct more illicit activities, the company said.
The group has used stolen credentials associated with privilege access management companies, cloud app providers and cloud data management companies to gain access to those companies' downstream customers and tenants, Microsoft said.
"Companies within these sectors are possible targets of interest to the threat actor," according to the blog.
Microsoft's blog provides recommendations for detecting and mitigating Silk Typhoon's activity, including ensuring that public facing devices are patched.
Write to Dean Seal at dean.seal@wsj.com
(END) Dow Jones Newswires
March 05, 2025 11:35 ET (16:35 GMT)
Copyright (c) 2025 Dow Jones & Company, Inc.
免责声明：投资有风险，本文并非投资建议，以上内容不应被视为任何金融产品的购买或出售要约、建议或邀请，作者或其他用户的任何相关讨论、评论或帖子也不应被视为此类内容。本文仅供一般参考，不考虑您的个人投资目标、财务状况或需求。TTM对信息的准确性和完整性不承担任何责任或保证，投资者应自行研究并在投资前寻求专业建议。