By Dean Seal
Microsoft warned that a Chinese state-sponsored hacking group is targeting common IT solutions to spy on companies and organizations around the world.
The company said in its threat intelligence blog Wednesday that it has identified a shift in tactics by Silk Typhoon, a Chinese state actor focused on espionage, toward using remote management tools and cloud applications to infiltrate a targeted organization.
Microsoft hasn't seen the group directly target its cloud services, but Silk Typhoon has exploited unpatched applications to elevate their access and conduct more illicit activities, the company said.
The group has used stolen credentials associated with privilege access management companies, cloud app providers and cloud data management companies to gain access to those companies' downstream customers and tenants, Microsoft said.
"Companies within these sectors are possible targets of interest to the threat actor," according to the blog.
Microsoft's blog provides recommendations for detecting and mitigating Silk Typhoon's activity, including ensuring that public facing devices are patched.
Write to Dean Seal at dean.seal@wsj.com
(END) Dow Jones Newswires
March 05, 2025 11:35 ET (16:35 GMT)
Copyright (c) 2025 Dow Jones & Company, Inc.
免責聲明：投資有風險，本文並非投資建議，以上內容不應被視為任何金融產品的購買或出售要約、建議或邀請，作者或其他用戶的任何相關討論、評論或帖子也不應被視為此類內容。本文僅供一般參考，不考慮您的個人投資目標、財務狀況或需求。TTM對信息的準確性和完整性不承擔任何責任或保證，投資者應自行研究並在投資前尋求專業建議。