Microsoft Corp. has alerted the public to a sophisticated campaign of supply-chain attacks orchestrated by a Chinese hacking group. The company’s threat intelligence division made the announcement in a blog post on Wednesday, identifying the group as ‘Silk Typhoon.’
According to Microsoft, Silk Typhoon is focusing its attacks on remote management tools and cloud applications. The objective of this espionage campaign is to gather intelligence on a wide array of businesses and organizations both within the United States and internationally.
The attackers are reportedly searching for details related to U.S. policy and ongoing investigations. This information could be exploited for various purposes, including financial gain, intellectual property theft, or even geopolitical advantage. The specifics of their targets and the extent of the data breaches remain under active investigation by Microsoft and relevant government agencies.
This isn’t the first time that Silk Typhoon has been linked to high-profile breaches. The group was previously blamed for the Treasury Department hack, suggesting a pattern of aggressive and persistent cyber espionage.
Microsoft’s warning underscores the increasing sophistication of cyber threats and the need for enhanced security measures. Organizations are advised to strengthen their defenses, including multi-factor authentication, regular security audits, and proactive monitoring of their networks.