Microsoft has announced that it will start notifying users it believes have been targeted by government-linked hackers, after failing to do so when Chinese authorities allegedly compromised over 1,000 Hotmail accounts.<\/p>\n
Joining other US technology companies \u2013 including Google, Facebook, Yahoo and Twitter \u2013 Microsoft said that the change in policy was designed to help users protect their data.<\/p>\n
Scott Charney, corporate vice president of Microsoft\u2019s Trustworthy Computing division, said: \u201cWe will now notify you if we believe your account has been targeted or compromised by an individual or group working on behalf of a nation state.<\/p>\n
\u201cWe\u2019re taking this additional step of specifically letting you know if we have evidence that the attacker may be \u2018state-sponsored\u2019 because it is likely that the attack could be more sophisticated or more sustained than attacks from cybercriminals and others.\u201d<\/p>\n
The change follows revelations that Microsoft corporate executives concluded that over 1,000 of the company\u2019s Hotmail email accounts had been hacked into by elements linked to Chinese authorities over three years starting in July 2009, but did not tell users.<\/p>\n
Targets included the emails of high-ranking Uighur and Tibetan leaders in multiple countries, African diplomats, human rights lawyers and others in sensitive positions inside China.<\/p>\n
Microsoft, after being alerted by security company Trend Micro in 2011, patched the security holes in its web services that allowed the hackers access to the emails and to reset user passwords. But it did not alert the affected users to the intrusions and the scope of the snooping, allowing the hackers to continue their campaign, according to former Microsoft employees.<\/p>\n
Microsoft officials did not dispute that most of the attacks came from China, including a Chinese network known as AS4808 which has been publicly attributed to China by US intelligence, but said some came from elsewhere. They did not give further details.<\/p>\n
\u201cWe weighed several factors in responding to this incident, including the fact that neither Microsoft nor the US government were able to identify the source of the attacks, which did not come from any single country,\u201d the company said. \u201cWe also considered the potential impact on any subsequent investigation and ongoing measures we were taking to prevent potential future attacks.\u201d<\/p>\n
The Chinese government \u201cis a resolute defender of cyber security and strongly opposes any forms of cyberattacks\u201d, a Chinese Foreign Ministry spokesman said.<\/p>\n
Charney said: \u201cThe evidence we collect in any active investigation may be sensitive, so we do not plan on providing detailed or specific information about the attackers or their methods. But when the evidence reasonably suggests the attacker is \u2018state sponsored\u2019, we will say so.\u201d<\/p>\n
–<\/p>\n
Source: The Guardian<\/p>\n","protected":false},"excerpt":{"rendered":"
Microsoft has announced that it will start notifying users it believes have been targeted by government-linked hackers, after failing to do so when Chinese authorities allegedly compromised over 1,000 Hotmail accounts. Joining other US technology companies \u2013 including Google, Facebook, Yahoo and Twitter \u2013 Microsoft said that the change in policy was designed to help […]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[106],"tags":[],"yoast_head":"\n