Microsoft Reveals How Storm-0558 Acquired the Signing Key: They Stole From a Crash Dump

Microsoft previously disclosed the successful thwarting of an attack orchestrated by Storm-0558, a threat actor based in China. The breach, reported on June 16, 2023, allowed the threat actors to infiltrate Microsoft accounts by exploiting consumer signing keys as their point of entry.

Storm-0558 has gained notoriety for primarily targeting government agencies in Western Europe, with its activities focusing on espionage, data exfiltration, and the acquisition of crucial credentials.

Most recently, Microsoft has released the results of the …

accounts actor attack breach china consumer crash entry exploiting june key keys microsoft point signing signing key storm storm-0558 threat threat actor threat actors