Now, a cyberattack is also said to have hit Microsoft: a criminal online group, not previously known, claims to have exfiltrated sensitive information from Microsoft. They are now demanding ransom.
The ransomware group ExfilSquad is boasting about an alleged data theft from Microsoft and is demanding ransom.
The cyber gang calls itself “ExfilSquad” and appears to have recently formed. On their darknet site, the criminals claim to have stolen 130 GB of uncompressed data from Microsoft. This is said to comprise around 8 million entries. Among them are reportedly personal information, employee and customer data, authentication details, password hashes, portal identities, business account information, business contacts, building management entries, internal service tickets, and access rights.
Much remains unclear
No further information is available. It remains unclear which system the perpetrators claim to have attacked and from when the data originates. It is also unknown what information, and to what extent, from employees and customers has potentially fallen into the wrong hands as a result. The claimed amount of data seems small for a global corporation like Microsoft.
