Microsoft notifies UK customers affected by hackers abusing ‘verified publisher’ tag

Microsoft said it has notified customers impacted by a campaign that involved the abuse of the company’s “verified publisher” status to allow access to a victim’s cloud environments.

Accounts can gain verified publisher status when an app publisher has verified their identity using their Microsoft Partner Network (MPN) account and has associated this MPN account with their app registration, according to Microsoft. 

But researchers with cybersecurity firm Proofpoint discovered a campaign that began on December 6 where hackers tricked users …

abuse abusing access account accounts app campaign cloud cloud environments customers cybersecurity environments hackers identity microsoft network partner proofpoint publisher registration researchers tag the company verified verified publisher victim