The service let malware authors sign malicious files with fraudulent Microsoft-issued certificates to bypass security checks.

The downstream impact of that service’s operations “has resulted in attacks against a broad range of industry sectors” in the U.S. and other nations, the company said.

Microsoft estimates that Fox Tempest generated more than 1,000 certificates and operated hundreds of Azure tenants and subscriptions.